Gilles Peskine 31a2d14b92 RSA PSS: fix first byte check for keys of size 8N+1 ... For a key of size 8N+1, check that the first byte after applying the public key operation is 0 (it could have been 1 instead). The code was incorrectly doing a no-op check instead, which led to invalid signatures being accepted. Not a security flaw, since you would need the private key to craft such an invalid signature, but a bug nonetheless.		2017-10-19 15:43:53 +02:00
..
data_files	RSA: Fix buffer overflow in PSS signature verification	2017-10-17 19:16:14 +02:00
scripts	Merge remote-tracking branch 'gilles/iotssl-1223/mbedtls-2.1' into mbedtls-2.1	2017-06-06 20:12:51 +02:00
suites	RSA PSS: fix first byte check for keys of size 8N+1	2017-10-19 15:43:53 +02:00
.gitignore	Move some ignore patterns to subdirectories	2015-01-28 15:33:23 +00:00
CMakeLists.txt	Remove need for elevated command line in Windows	2017-02-20 21:47:29 +00:00
compat.sh	Fix bug in backport from SHA-1 blacklisting	2017-06-06 19:35:34 +02:00
Descriptions.txt	Add selftest program to the list of tests	2014-04-04 16:33:01 +02:00
Makefile	Cosmetics in Makefiles	2015-07-08 22:12:06 +01:00
ssl-opt.sh	Remove the check in ssl-opt.sh for MAX_INTERMEDIATE_CA	2017-07-28 13:02:33 +01:00