From 600636e931f3ae4b31f6a94fc56392b80e884f0a Mon Sep 17 00:00:00 2001 From: Filippo Valsorda Date: Wed, 8 Mar 2023 17:35:30 +0100 Subject: [release-branch.go1.20] crypto/rsa: use BoringCrypto for 4096 bit keys Updates #58803 Fixes #58927 Change-Id: I097938ff61dae2b65214f8d0126d68de63525f5b Reviewed-on: https://go-review.googlesource.com/c/go/+/474515 Run-TryBot: Filippo Valsorda TryBot-Result: Gopher Robot Reviewed-by: Dmitri Shuralyov Reviewed-by: Roland Shoemaker (cherry picked from commit 7bc3281747030877e13d218ba12c6e95fcf4e7d4) Reviewed-on: https://go-review.googlesource.com/c/go/+/495735 Reviewed-by: Heschi Kreinick --- src/crypto/rsa/rsa.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go index 11f87e8e49..63bc8dad1a 100644 --- a/src/crypto/rsa/rsa.go +++ b/src/crypto/rsa/rsa.go @@ -286,7 +286,8 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) { func GenerateMultiPrimeKey(random io.Reader, nprimes int, bits int) (*PrivateKey, error) { randutil.MaybeReadByte(random) - if boring.Enabled && random == boring.RandReader && nprimes == 2 && (bits == 2048 || bits == 3072) { + if boring.Enabled && random == boring.RandReader && nprimes == 2 && + (bits == 2048 || bits == 3072 || bits == 4096) { bN, bE, bD, bP, bQ, bDp, bDq, bQinv, err := boring.GenerateKeyRSA(bits) if err != nil { return nil, err -- cgit v1.2.1