Gilles Peskine 31a2d14b92 RSA PSS: fix first byte check for keys of size 8N+1 ...

For a key of size 8N+1, check that the first byte after applying the
public key operation is 0 (it could have been 1 instead). The code was
incorrectly doing a no-op check instead, which led to invalid
signatures being accepted. Not a security flaw, since you would need the
private key to craft such an invalid signature, but a bug nonetheless.

2017-10-19 15:43:53 +02:00

..

data_files

RSA: Fix buffer overflow in PSS signature verification

2017-10-17 19:16:14 +02:00

scripts

Merge remote-tracking branch 'gilles/iotssl-1223/mbedtls-2.1' into mbedtls-2.1

2017-06-06 20:12:51 +02:00

suites

RSA PSS: fix first byte check for keys of size 8N+1

2017-10-19 15:43:53 +02:00

.gitignore

Move some ignore patterns to subdirectories

2015-01-28 15:33:23 +00:00

CMakeLists.txt

Remove need for elevated command line in Windows

2017-02-20 21:47:29 +00:00

compat.sh

Fix bug in backport from SHA-1 blacklisting

2017-06-06 19:35:34 +02:00

Descriptions.txt

Add selftest program to the list of tests

2014-04-04 16:33:01 +02:00

Makefile

Cosmetics in Makefiles

2015-07-08 22:12:06 +01:00

ssl-opt.sh

Remove the check in ssl-opt.sh for MAX_INTERMEDIATE_CA

2017-07-28 13:02:33 +01:00