denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added error messages in signature verification

Browse Source
This commit is contained in:
Andreas Steffen
2007-09-12 07:06:52 +00:00
parent f749108056
commit 8b373ee6fc
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/crypto/rsa/rsa_public_key.c
+7 -4
View File
@@ -29,6 +29,7 @@
#include "rsa_public_key.h" #include "rsa_public_key.h"
#include <debug.h>
#include <crypto/hashers/hasher.h> #include <crypto/hashers/hasher.h>
#include <asn1/asn1.h> #include <asn1/asn1.h>
#include <asn1/pem.h> #include <asn1/pem.h>
@@ -198,7 +199,7 @@ static status_t verify_emsa_pkcs1_signature(const private_rsa_public_key_t *this
/* no digestInfo found */ /* no digestInfo found */
goto end; goto end;
} }
/* parse ASN.1-based digestInfo */ /* parse ASN.1-based digestInfo */
{ {
asn1_ctx_t ctx; asn1_ctx_t ctx;
@@ -218,9 +219,10 @@ static status_t verify_emsa_pkcs1_signature(const private_rsa_public_key_t *this
switch (objectID) switch (objectID)
{ {
case DIGEST_INFO: case DIGEST_INFO:
if (object.len != em.len) if (em.len > object.len)
{ {
/* surplus bytes after the digestInfo object */ DBG1("digestInfo field in signature is followed by %u surplus bytes",
em.len - object.len);
goto end; goto end;
} }
break; break;
@@ -232,6 +234,7 @@ static status_t verify_emsa_pkcs1_signature(const private_rsa_public_key_t *this
if (hash_algorithm == HASH_UNKNOWN if (hash_algorithm == HASH_UNKNOWN
|| (algorithm != HASH_UNKNOWN && hash_algorithm != algorithm)) || (algorithm != HASH_UNKNOWN && hash_algorithm != algorithm))
{ {
DBG1("wrong hash algorithm used in signature");
goto end; goto end;
} }
} }
@@ -243,7 +246,7 @@ static status_t verify_emsa_pkcs1_signature(const private_rsa_public_key_t *this
if (object.len != hasher->get_hash_size(hasher)) if (object.len != hasher->get_hash_size(hasher))
{ {
/* wrong hash size */ DBG1("wrong hash size in signature");
hasher->destroy(hasher); hasher->destroy(hasher);
goto end; goto end;
} }