Skip to content

Commit dcee606

Browse files
stefanbergerherbertx
authored andcommitted
crypto: ecdsa - Adjust tests on length of key parameters
In preparation for support of NIST P521, adjust the basic tests on the length of the provided key parameters to only ensure that the length of the x plus y coordinates parameter array is not an odd number and that each coordinate fits into an array of 'ndigits' digits. Mathematical tests on the key's parameters are then done in ecc_is_pubkey_valid_full rejecting invalid keys. The change is necessary since NIST P521 keys do not have keys with coordinates that each require 'full' digits (= all bits in u64 used). NIST P521 only requires 2 bytes (9 bits) in the most significant digit unlike NIST P192/256/384 that each require multiple 'full' digits. Tested-by: Lukas Wunner <lukas@wunner.de> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Tested-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
1 parent d67c96f commit dcee606

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

crypto/ecdsa.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -230,7 +230,7 @@ static int ecdsa_set_pub_key(struct crypto_akcipher *tfm, const void *key, unsig
230230
if (ret < 0)
231231
return ret;
232232

233-
if (keylen < 1 || (((keylen - 1) >> 1) % sizeof(u64)) != 0)
233+
if (keylen < 1 || ((keylen - 1) & 1) != 0)
234234
return -EINVAL;
235235
/* we only accept uncompressed format indicated by '4' */
236236
if (d[0] != 4)

0 commit comments

Comments
 (0)