diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2014-09-29 12:16:13 +0100 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2014-09-29 12:31:29 +0100 |
commit | 5a7fc89394bb11dc8ac578d23d77762d2d58fff2 (patch) | |
tree | a6a17746b05b34d6ad4e629ca8388d63efb28502 /CHANGES | |
parent | 116fd3732a873976aeb0baff401c8f618171e6bb (diff) |
Add additional DigestInfo checks.
Reencode DigestInto in DER and check against the original: this
will reject any improperly encoded DigestInfo structures.
Note: this is a precautionary measure, there is no known attack
which can exploit this.
Thanks to Brian Smith for reporting this issue.
Reviewed-by: Tim Hudson <tjh@openssl.org>
Diffstat (limited to 'CHANGES')
-rw-r--r-- | CHANGES | 10 |
1 files changed, 9 insertions, 1 deletions
@@ -4,7 +4,15 @@ Changes between 0.9.8zb and 0.9.8zc [xx XXX xxxx] - *) + *) Add additional DigestInfo checks. + + Reencode DigestInto in DER and check against the original when + verifying RSA signature: this will reject any improperly encoded + DigestInfo structures. + + Note: this is a precautionary measure and no attacks are currently known. + + [Steve Henson] Changes between 0.9.8za and 0.9.8zb [6 Aug 2014] |