projects / archaic-openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b162044) | patch
Add additional DigestInfo checks.
authorDr. Stephen Henson <steve@openssl.org>
Thu, 25 Sep 2014 22:28:48 +0000 (23:28 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Mon, 29 Sep 2014 11:22:32 +0000 (12:22 +0100)
commit55614f89f0beb53ebafbfc680cf7b4d114b44d30
tree63273f30d99ba3756745058bd12e6a206f035ec2tree | snapshot
parentb1620443f3784fa11ae3018361b4fe547dc926bbcommit | diff
Add additional DigestInfo checks.

Reencode DigestInto in DER and check against the original: this
will reject any improperly encoded DigestInfo structures.

Note: this is a precautionary measure, there is no known attack
which can exploit this.

Thanks to Brian Smith for reporting this issue.
Reviewed-by: Tim Hudson <tjh@openssl.org>
CHANGES diff | blob | history
crypto/rsa/rsa_sign.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.