diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2016-02-14 18:41:01 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2016-02-14 18:41:01 +0100 |
| commit | 6ca9688e9759c118fbb43d880f195f4ae62f886e (patch) | |
| tree | 7aeb0916d234a5f9ddb0cea70fcbe419d83ab049 /lib/nettle/int | |
| parent | 713544ee0966dbf14bab516a09f6991e6df52759 (diff) | |
| download | gnutls-6ca9688e9759c118fbb43d880f195f4ae62f886e.tar.gz | |
provable RSA key generation: adjust the seed size based on N size
Diffstat (limited to 'lib/nettle/int')
| -rw-r--r-- | lib/nettle/int/rsa-keygen-fips186.c | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/lib/nettle/int/rsa-keygen-fips186.c b/lib/nettle/int/rsa-keygen-fips186.c index e5fbb12e40..8c207efd73 100644 --- a/lib/nettle/int/rsa-keygen-fips186.c +++ b/lib/nettle/int/rsa-keygen-fips186.c @@ -382,6 +382,10 @@ _rsa_generate_fips186_4_keypair(struct rsa_public_key *pub, return ret; } +/* Not entirely accurate but a good precision + */ +#define SEED_LENGTH(bits) (_gnutls_pk_bits_to_subgroup_bits(bits)/8) + /* This generates p,q params using the B.3.2.2 algorithm in FIPS 186-4. * * The hash function used is SHA384. @@ -398,7 +402,7 @@ rsa_generate_fips186_4_keypair(struct rsa_public_key *pub, /* Desired size of modulo, in bits */ unsigned n_size) { - uint8_t seed[32]; + uint8_t seed[128]; unsigned seed_length; int ret; @@ -409,10 +413,9 @@ rsa_generate_fips186_4_keypair(struct rsa_public_key *pub, } } - if (n_size == 2048) - seed_length = 14 * 2; - else - seed_length = 16 * 2; + seed_length = SEED_LENGTH(n_size); + if (seed_length > sizeof(seed)) + return 0; random(random_ctx, seed_length, seed); |