diff options
| author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2020-11-29 10:01:16 -0600 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-11-29 11:01:16 -0500 |
| commit | 4645f02c25d7d336a6d922e428c72beb55fb04cb (patch) | |
| tree | 8e84d507468e4a81d50a34a0afc4f6d9a641b6e5 /vectors | |
| parent | fd7ed6704087f1d71781e48e6c268341429b3abc (diff) | |
| download | cryptography-4645f02c25d7d336a6d922e428c72beb55fb04cb.tar.gz | |
disallow p less than 512-bit on DH (#5592)
* disallow p less than 512-bit on DH
OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere
that's practical for us. (Note that we do not enforce on deserializing
PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the
3.0.0 support branch we can test an error path)
* missing test
* black
* _MIN_MODULUS_SIZE is now a thing
* skip on fips
Diffstat (limited to 'vectors')
| -rw-r--r-- | vectors/cryptography_vectors/asymmetric/DH/dh_key_256.pem | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/vectors/cryptography_vectors/asymmetric/DH/dh_key_256.pem b/vectors/cryptography_vectors/asymmetric/DH/dh_key_256.pem new file mode 100644 index 000000000..1c01dd3ea --- /dev/null +++ b/vectors/cryptography_vectors/asymmetric/DH/dh_key_256.pem @@ -0,0 +1,4 @@ +-----BEGIN PRIVATE KEY----- +MFwCAQAwMwYJKoZIhvcNAQMBMCYCIQCBPg6BS+5nbb09nSjtc9NnNdIf9kVyNvaN +PWFFVgwPqwIBAgQiAiBmJ3qBbu72ZnUxnCrr8ujWFU7jWTcOjhsZSqobmiD6vA== +-----END PRIVATE KEY----- |