diff options
| author | Matt Caswell <matt@openssl.org> | 2019-10-28 14:43:42 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2019-11-14 09:29:46 +0000 |
| commit | 081d08fa58e300142f08ee670d63c84333a47cb0 (patch) | |
| tree | fc8f6553b42f48158ddfce15c87ddd630ab4afb9 /crypto | |
| parent | 2c938e2ee8b420e3a1260a2446f3f820f01e71d5 (diff) | |
Increase OSSL_PARAM_BLD_MAX for multi-prime RSA
The old value of 10 for OSSL_PARAM_BLD_MAX is insufficient for multi-prime
RSA. That code has this assert:
if (!ossl_assert(/* n, e */ 2 + /* d */ 1 + /* numprimes */ 1
+ numprimes + numexps + numcoeffs
<= OSSL_PARAM_BLD_MAX))
goto err;
So we increase OSSL_PARAM_BLD_MAX which would be enough for 7 primes
(more than you would ever reasonably want).
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/10152)
Diffstat (limited to 'crypto')
| -rw-r--r-- | crypto/rsa/rsa_ameth.c | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/crypto/rsa/rsa_ameth.c b/crypto/rsa/rsa_ameth.c index d2f976f681..ade3fe2578 100644 --- a/crypto/rsa/rsa_ameth.c +++ b/crypto/rsa/rsa_ameth.c @@ -1096,10 +1096,7 @@ static void *rsa_pkey_export_to(const EVP_PKEY *pk, EVP_KEYMGMT *keymgmt, if (numprimes < 2 || numexps < 2 || numcoeffs < 1) goto err; - /* - * assert that an OSSL_PARAM_BLD has enough space. - * (the current 10 places doesn't have space for multi-primes) - */ + /* assert that an OSSL_PARAM_BLD has enough space. */ if (!ossl_assert(/* n, e */ 2 + /* d */ 1 + /* numprimes */ 1 + numprimes + numexps + numcoeffs <= OSSL_PARAM_BLD_MAX)) |