]> git.ipfire.org Git - thirdparty/pdns.git/commit
Fix "random" ECDSA signature failures when using mbedTLS 3106/head
authorRemi Gacogne <rgacogne-github@coredump.fr>
Wed, 23 Dec 2015 21:36:32 +0000 (22:36 +0100)
committerRemi Gacogne <rgacogne-github@coredump.fr>
Wed, 23 Dec 2015 21:36:32 +0000 (22:36 +0100)
commit483c78e3e81fe015fa3eb3e3896809794a94d729
treecff8df3a5f6cd37c426317474667d917d4900e1b
parent064d9185d35e215164cea45ba3585e6c8aa9fa59
Fix "random" ECDSA signature failures when using mbedTLS

It turns out that mbedtls_mpi_size() does no always return what
I expected for the r and s values of ECDSA signatures.
We now rely on mbedtls_mpi_size(&d_ctx.grp.P), as P is fixed for
the group anyway, so we shouldn't have any suprise here.
pdns/mbedtlssigners.cc