]> git.ipfire.org Git - thirdparty/openssl.git/commit
Two more private key checks.
authorViktor Dukhovni <openssl-users@dukhovni.org>
Fri, 7 Feb 2025 08:16:33 +0000 (19:16 +1100)
committerTomas Mraz <tomas@openssl.org>
Fri, 14 Feb 2025 09:50:59 +0000 (10:50 +0100)
commitb3dd681f073817660ba4710516a033b6e1344b46
treed2b5b5ee8bebf4bdac7a90c64ed35ad133f9c513
parent2ea9903c160fe4212b07ec8af630071e35098ceb
Two more private key checks.

- When a PKCS#8 has both seed and key cross check the implicit
  rejection value |z|

- When an import (EVP_PKEY_fromdata call) provides both a private
  and public key, fail if the redundant public key does not match
  the copy in the private key.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26656)
doc/man7/EVP_PKEY-ML-KEM.pod
providers/implementations/encode_decode/ml_kem_codecs.c
providers/implementations/encode_decode/ml_kem_codecs.h
providers/implementations/keymgmt/ml_kem_kmgmt.c