evp_test: Added the special private key that triggers bug (CVE-2011-4354)
authorTrust-Worthy <jondeveloper0@gmail.com>
Mon, 22 Apr 2024 18:59:31 +0000 (14:59 -0400)
committerTomas Mraz <tomas@openssl.org>
Tue, 14 May 2024 13:57:19 +0000 (15:57 +0200)
The bug triggers in 32 bit linux distros running openssl 0.9.8g.

This adds a regression test case.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24235)

test/recipes/30-test_evp_data/evppkey_ecc.txt

index 9ac1a4eb9eb0f8fc6fefcbdef3d6b3c547356108..6ea11db668315f356d1ec5a992d784398d87b9d9 100644 (file)
@@ -3598,6 +3598,20 @@ Result = DERIVE_SET_PEER_ERROR
 
 Title=prime256v1 curve tests
 
+PrivateKey=ALICE_naf_prime256v1
+-----BEGIN PRIVATE KEY-----
+MEECAQAwEwYHKoZIzj0CAQYIKoZIzj0DAQcEJzAlAgEBBCCrgvdSKyu+zo6wERHP
++5gkQ5yoY1SIgHYyZXQXRr+O2A==
+-----END PRIVATE KEY-----
+
+PublicKey=ALICE_naf_prime256v1_PUB
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5usNhOHMXYW1W8/E0TRbMhSvK4a0
+ipu5+xDoKbhz55WBgERHxLWAvZugiDpyoshYqVPseGubEPA4ZpGdieYajA==
+-----END PUBLIC KEY-----
+
+PrivPubKeyPair=ALICE_naf_prime256v1:ALICE_naf_prime256v1_PUB
+
 PrivateKey=ALICE_cf_prime256v1
 -----BEGIN PRIVATE KEY-----
 MEECAQAwEwYHKoZIzj0CAQYIKoZIzj0DAQcEJzAlAgEBBCDZE0NZiGAFJX6JQxumKTFRT+XFCQqJ