corrected s check in _dsa_generate_dss_pq

diff --git a/lib/nettle/int/dsa-keygen-fips186.c b/lib/nettle/int/dsa-keygen-fips186.c
index 0bcc7eed7a26f6cd97c1e4e37fda7f9670088e60..09ad132a8664bfc669b98a4c844d09f334012512 100644 (file)
--- a/lib/nettle/int/dsa-keygen-fips186.c
+++ b/lib/nettle/int/dsa-keygen-fips186.c
@@ -96,7 +96,7 @@ _dsa_generate_dss_pq(struct dsa_public_key *pub,
   mpz_set_ui(r, 1);
   mpz_mul_2exp (r, r, q_bits - 1);
 
-  if (mpz_cmp(s, r) < 0)
+  if (mpz_cmp(s, r) >= 0)
     goto fail;
 
   cert->qseed_length = sizeof(cert->qseed);