do not impose limits to index

diff --git a/lib/nettle/int/dsa-keygen-fips186.c b/lib/nettle/int/dsa-keygen-fips186.c
index 0cf31686b68da05fb88cd505645189c575ebb463..d6e548ff29450c12981744c5a3e91f6ade1dedee 100644 (file)
--- a/lib/nettle/int/dsa-keygen-fips186.c
+++ b/lib/nettle/int/dsa-keygen-fips186.c
@@ -266,7 +266,7 @@ _dsa_generate_dss_g(struct dsa_public_key *pub,
        uint8_t digest[DIGEST_SIZE];
        int ret;
 
-       if (index != 1 && index != 2)
+       if (index > 65535)
                return 0;
 
        dseed_size =

diff --git a/lib/nettle/int/dsa-validate.c b/lib/nettle/int/dsa-validate.c
index 09fce87149331d46517c88b5c7f85fcdc9bd5a10..8146463f6f1da77cf5f305a417d5cd175c09627d 100644 (file)
--- a/lib/nettle/int/dsa-validate.c
+++ b/lib/nettle/int/dsa-validate.c
@@ -91,7 +91,7 @@ _dsa_validate_dss_g(struct dsa_public_key *pub,
        mpz_set(pub2.q, pub->q);
 
        /* verify g */
-       if (index != 1 && index != 2) {
+       if (index > 65535) {
                goto fail;
        }