]> git.ipfire.org Git - thirdparty/openssl.git/commit
SLH-DSA - restrict keygen seed length to exact value of 3*n
authorslontis <shane.lontis@oracle.com>
Thu, 20 Feb 2025 21:54:36 +0000 (08:54 +1100)
committerslontis <shane.lontis@oracle.com>
Sat, 22 Feb 2025 11:46:44 +0000 (22:46 +1100)
commit6e770d38c72e15ab7d0f7ee0a5dd8deb88116571
tree59753017e6ecce4f878408b10bce13131452a5a2
parent5b52a6395c00a8a68dc6950b1a4645c59271a7ec
SLH-DSA - restrict keygen seed length to exact value of 3*n

It was allowing the seed to be larger, and then just ignoring the
trailing bytes.

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26858)
crypto/slh_dsa/slh_dsa_key.c
include/crypto/slh_dsa.h
providers/implementations/keymgmt/slh_dsa_kmgmt.c
providers/implementations/signature/slh_dsa_sig.c
test/slh_dsa_test.c