diff options
| author | Richard Levitte <levitte@openssl.org> | 2023-10-27 09:01:19 +0200 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2024-01-12 11:07:39 +0100 |
| commit | 1d490694dfa790d8e47f8f2ea62ea1d9b1251179 (patch) | |
| tree | 1f4c7868fd7cd8fda174d2c235bd21c2d534ca60 /CHANGES.md | |
| parent | 0981c20f8efa68bf9d68d7715280f83812c19a7e (diff) | |
Fix the encoding of SM2 keys
OpenSSL's encoding of SM2 keys used the SM2 OID for the algorithm OID
where an AlgorithmIdentifier is encoded (for encoding into the structures
PrivateKeyInfo and SubjectPublicKeyInfo).
Such keys should be encoded as ECC keys.
Fixes #22184
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22529)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index 43b02502d8..eb16a6e24e 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -75,6 +75,12 @@ OpenSSL 3.2 ### Changes between 3.2.0 and 3.2.1 [xx XXX xxxx] + * Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to + have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey + rather than SM2. + + *Richard Levitte* + * The POLY1305 MAC (message authentication code) implementation in OpenSSL for PowerPC CPUs saves the contents of vector registers in different order than they are restored. Thus the contents of some of these vector |