cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-29 08:24:11 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8917 from gilles-peskine-arm/mbedtls_pk_decrypt-USE_PSA_CRYPTO-changelog-correction

Browse Source 
mbedtls_pk_decrypt/encrypt actually check the padding mode
This commit is contained in:
Manuel Pégourié-Gonnard 2024-03-12 07:53:54 +00:00 committed by GitHub
commit 1c191c1317
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ChangeLog.d/8824.txt
View File

@ -1,7 +1,8 @@
Bugfix Bugfix
* Fix mbedtls_pk_sign(), mbedtls_pk_verify(), mbedtls_pk_decrypt() and * Fix mbedtls_pk_sign(), mbedtls_pk_verify(), mbedtls_pk_decrypt() and
mbedtls_pk_encrypt() on non-opaque RSA keys to honor the padding mode in mbedtls_pk_encrypt() on non-opaque RSA keys to honor the padding mode in
the RSA context. Before, if MBEDTLS_USE_PSA_CRYPTO was enabled, they always the RSA context. Before, if MBEDTLS_USE_PSA_CRYPTO was enabled and the
used PKCS#1 v1.5 even when the RSA context was configured for PKCS#1 v2.1 RSA context was configured for PKCS#1 v2.1 (PSS/OAEP), the sign/verify
(PSS/OAEP). Fixes #8824. functions performed a PKCS#1 v1.5 signature instead and the
encrypt/decrypt functions returned an error. Fixes #8824.