]> git.ipfire.org Git - thirdparty/openssl.git/commit
Update size check condition for probable primes to align with FIPS 186-5.
authorleesugil <sugilmath@gmail.com>
Sun, 14 Sep 2025 16:10:33 +0000 (12:10 -0400)
committerTomas Mraz <tomas@openssl.org>
Tue, 14 Oct 2025 16:06:37 +0000 (18:06 +0200)
commit1d0a29d557fa70dfe0e7286e61f552c1b99d1921
treef6bfb75f0f1fa795467de11b9bc9c649932b6cd5
parent43cddc534eebf33c301bf2fabed8fa52fb92526c
Update size check condition for probable primes to align with FIPS 186-5.

Fixes #28540

In FIPS 186-4 (Table B.1), the upper bounds for probable primes p and q were
defined using strict inequalities. In FIPS 186-5, Table A.1 replaces the
previous Table B.1 (dropping the nlen=1024 case) and revises the upper bound
condition to use weak inequalities.

CLA: trivial

Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28540)
crypto/bn/bn_rsa_fips186_4.c