[git] GCRYPT - branch, master, updated. libgcrypt-1.6.0-316-g7a019bc

[by NIIBE Yutaka]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The GNU crypto library".

The branch, master has been updated
       via  7a019bc7ecdbdfdef51094e090ce95e062da9b64 (commit)
      from  b12dd550fd6af687ef95c584d0d8366c34965cc8 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 7a019bc7ecdbdfdef51094e090ce95e062da9b64
Author: NIIBE Yutaka <gniibe at fsij.org>
Date:   Fri Feb 12 13:50:02 2016 +0900

    ecc: Not validate input point for Curve25519.
    
    * cipher/ecc.c (ecc_decrypt_raw): Curve25519 is an exception.
    
    --
    
    Signed-off-by: NIIBE Yutaka <gniibe at fsij.org>

diff --git a/cipher/ecc.c b/cipher/ecc.c
index d1fe823..4cdbb14 100644
--- a/cipher/ecc.c
+++ b/cipher/ecc.c
@@ -1570,7 +1570,9 @@ ecc_decrypt_raw (gcry_sexp_t *r_plain, gcry_sexp_t s_data, gcry_sexp_t keyparms)
   if (DBG_CIPHER)
     log_printpnt ("ecc_decrypt    kG", &kG, NULL);
 
-  if (!_gcry_mpi_ec_curve_point (&kG, ec))
+  if (!(curvename && !strcmp (curvename, "Curve25519"))
+      /* For Curve25519, by its definition, validation should not be done.  */
+      && !_gcry_mpi_ec_curve_point (&kG, ec))
     {
       rc = GPG_ERR_INV_DATA;
       goto leave;

-----------------------------------------------------------------------

Summary of changes:
 cipher/ecc.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)


hooks/post-receive
-- 
The GNU crypto library
http://git.gnupg.org


_______________________________________________
Gnupg-commits mailing list
Gnupg-commits at gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-commits