From: Juliusz Sosinowicz <juliusz@wolfssl.com>
Date: Fri, 24 Nov 2023 14:36:49 +0000 (+0100)
Subject: SAE: prime_len means length in bytes not bits
X-Git-Tag: hostap_2_11~788
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=01d95b75b8a4340a9e6ea16a3553807694eed327;p=thirdparty%2Fhostap.git

SAE: prime_len means length in bytes not bits

The prime_len variable is used as the length in bytes but it is set as
the length in bits. This fixes the sae DH group tests with wolfSSL.

Fixes: f8f20717f87e ("SAE: Use const_time selection for PWE in FFC")
Signed-off-by: Juliusz Sosinowicz <juliusz@wolfssl.com>
---

diff --git a/src/common/sae.c b/src/common/sae.c
index d4a196f15..f1c164e13 100644
--- a/src/common/sae.c
+++ b/src/common/sae.c
@@ -458,7 +458,7 @@ static int sae_derive_pwe_ffc(struct sae_data *sae, const u8 *addr1,
 		       * mask */
 	u8 mask;
 	struct crypto_bignum *pwe;
-	size_t prime_len = sae->tmp->prime_len * 8;
+	size_t prime_len = sae->tmp->prime_len;
 	u8 *pwe_buf;
 
 	crypto_bignum_deinit(sae->tmp->pwe_ffc, 1);