]> git.ipfire.org Git - thirdparty/openssl.git/commit
FIPS: Fix RSA X.931 padding check
authorSimo Sorce <simo@redhat.com>
Fri, 3 Oct 2025 15:49:24 +0000 (11:49 -0400)
committerDmitry Belyavskiy <beldmit@gmail.com>
Thu, 23 Oct 2025 13:51:54 +0000 (15:51 +0200)
commitb632daa5255614db0a305cd2f4eaf84d1816b540
tree89ac16f16ff0e8e53e22ebc48183a302ec6a23b2
parent9f87698878c25b53f5ddb662ae8eb9bcf80d7959
FIPS: Fix RSA X.931 padding check

The padding check was not complete and would miss the Message
Signature API case, which also needs to be rejected.

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28741)
providers/implementations/signature/rsa_sig.c
test/recipes/30-test_evp_data/evppkey_rsa.txt