From c9fe362303fc54ff19bde7511475f28663f7d554 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Wed, 18 Oct 2017 10:23:33 +0100 Subject: [PATCH 1/1] Correct value for BN_security_bits() The function BN_security_bits() uses the values from SP800-57 to assign security bit values for different FF key sizes. However the value for 192 security bits is wrong. SP800-57 has it as 7680 but the code had it as 7690. Reviewed-by: Tim Hudson Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/4546) --- crypto/bn/bn_lib.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crypto/bn/bn_lib.c b/crypto/bn/bn_lib.c index 7571561f9c..dd79f94502 100644 --- a/crypto/bn/bn_lib.c +++ b/crypto/bn/bn_lib.c @@ -812,7 +812,7 @@ int BN_security_bits(int L, int N) int secbits, bits; if (L >= 15360) secbits = 256; - else if (L >= 7690) + else if (L >= 7680) secbits = 192; else if (L >= 3072) secbits = 128; -- 2.34.1