From 0c05fda40e3d55a322970f2bbbfea89e645e6902 Mon Sep 17 00:00:00 2001 From: Pauli Date: Wed, 26 May 2021 09:27:32 +1000 Subject: [PATCH] rsa: remove the limit on the maximum key strength Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/15472) --- crypto/rsa/rsa_sp800_56b_gen.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/crypto/rsa/rsa_sp800_56b_gen.c b/crypto/rsa/rsa_sp800_56b_gen.c index 077c32f1e9d..2cd0dba7640 100644 --- a/crypto/rsa/rsa_sp800_56b_gen.c +++ b/crypto/rsa/rsa_sp800_56b_gen.c @@ -17,7 +17,6 @@ #define RSA_FIPS1864_MIN_KEYGEN_KEYSIZE 2048 #define RSA_FIPS1864_MIN_KEYGEN_STRENGTH 112 -#define RSA_FIPS1864_MAX_KEYGEN_STRENGTH 256 /* * Generate probable primes 'p' & 'q'. See FIPS 186-4 Section B.3.6 @@ -174,8 +173,7 @@ int ossl_rsa_sp800_56b_validate_strength(int nbits, int strength) int s = (int)ossl_ifc_ffc_compute_security_bits(nbits); #ifdef FIPS_MODULE - if (s < RSA_FIPS1864_MIN_KEYGEN_STRENGTH - || s > RSA_FIPS1864_MAX_KEYGEN_STRENGTH) { + if (s < RSA_FIPS1864_MIN_KEYGEN_STRENGTH) { ERR_raise(ERR_LIB_RSA, RSA_R_INVALID_MODULUS); return 0; } -- 2.47.3