denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

gmp: Add support for static salts when signing with RSA-PSS

Browse Source
This commit is contained in:
Tobias Brunner
2017-11-08 16:48:10 +01:00
parent c380608a89
commit f241a981aa
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/gmp/gmp_rsa_private_key.c
+6 -2
View File
@@ -380,7 +380,11 @@ static bool build_emsa_pss_signature(private_gmp_rsa_private_key_t *this,
} }
salt.len = hash.len; salt.len = hash.len;
if (params->salt_len > RSA_PSS_SALT_LEN_DEFAULT) if (params->salt.len)
{
salt = params->salt;
}
else if (params->salt_len > RSA_PSS_SALT_LEN_DEFAULT)
{ {
salt.len = params->salt_len; salt.len = params->salt_len;
} }
@@ -388,7 +392,7 @@ static bool build_emsa_pss_signature(private_gmp_rsa_private_key_t *this,
{ /* too long */ { /* too long */
goto error; goto error;
} }
if (salt.len) if (salt.len && !params->salt.len)
{ {
salt = chunk_alloca(salt.len); salt = chunk_alloca(salt.len);
rng = lib->crypto->create_rng(lib->crypto, RNG_STRONG); rng = lib->crypto->create_rng(lib->crypto, RNG_STRONG);