]> git.ipfire.org Git - thirdparty/openssl.git/commit
dh_kmgmt.c: Avoid expensive public key validation for known safe-prime groups
authorTomas Mraz <tomas@openssl.org>
Mon, 5 Aug 2024 15:54:14 +0000 (17:54 +0200)
committerTomas Mraz <tomas@openssl.org>
Wed, 7 Aug 2024 17:47:00 +0000 (19:47 +0200)
commite70e34d857d4003199bcb5d3b52ca8102ccc1b98
treeaa35137cabce18be7563a59ded11ad3bb6df83af
parent7bcfb41489903543546d25ec13f8c58f36a147b3
dh_kmgmt.c: Avoid expensive public key validation for known safe-prime groups

The partial validation is fully sufficient to check the key validity.

Thanks to Szilárd Pfeiffer for reporting the issue.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/25088)
providers/implementations/keymgmt/dh_kmgmt.c