diff options
| author | tb <> | 2022-04-07 17:37:25 +0000 |
|---|---|---|
| committer | tb <> | 2022-04-07 17:37:25 +0000 |
| commit | 1061feec63ce8eec5e559ca2697b80bc73044484 (patch) | |
| tree | d24b9a5f8727ef577e3036c13bcebc52ae475072 /src/lib/libcrypto/dsa/dsa_ameth.c | |
| parent | a46afc15b79c1deda49ec8ee141c1c5cdcd050d9 (diff) | |
| download | openbsd-1061feec63ce8eec5e559ca2697b80bc73044484.tar.gz openbsd-1061feec63ce8eec5e559ca2697b80bc73044484.tar.bz2 openbsd-1061feec63ce8eec5e559ca2697b80bc73044484.zip | |
Avoid infinite loop for custom curves of order 1
If a private key encoded with EC parameters happens to have
order 1 and is used for ECDSA signatures, this causes an
infinite loop since a random integer x in the interval [0,1)
will be 0, so do ... while (x == 0); will loop indefinitely.
Found and reported with a reproducer by Hanno Boeck.
Helpful comments and analysis from David Benjamin.
ok beck jsing
Diffstat (limited to 'src/lib/libcrypto/dsa/dsa_ameth.c')
0 files changed, 0 insertions, 0 deletions