[gnutls-devel] GnuTLS | pk: add flags to force RSA-PSS salt length to match digest length (!1455)

[Read-only notification of GnuTLS library development activities]

Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/1455 was reviewed by Hubert Kario (@mention me if you need reply)

--
  
Hubert Kario (@mention me if you need reply) started a new discussion on lib/privkey.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1455#note_644075098

> +				return gnutls_assert_val(GNUTLS_E_CONSTRAINT_ERROR);
> +			}
> +			if (salt_size > key_size - hash_size - 2) {

this is duplicating the code from `_gnutls_find_rsa_pss_salt_size`

--
  
Hubert Kario (@mention me if you need reply) started a new discussion on tests/rsa-rsa-pss.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1455#note_644075108

> +	sign_verify_data(GNUTLS_SIGN_RSA_PSS_SHA256, pkey_rsa_pss, 0, 0, 0, 0);
> +	sign_verify_data(GNUTLS_SIGN_RSA_PSS_RSAE_SHA256, pkey_rsa, 0, 0, 0, 0);
> +	sign_verify_data(GNUTLS_SIGN_RSA_PSS_SHA256, pkey_rsa, 0, 0, 0, 0);

what about keys that have RSA-PSS parameters encoded that limit what hashes and salt length they can be used with?


-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1455
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20210805/985deba6/attachment.html>