From 56de8cd6229f0ffd005c161622a774c581e93ad2 Mon Sep 17 00:00:00 2001
From: Jacob Barthelmeh <jacob@wolfssl.com>
Date: Wed, 2 Mar 2022 16:52:04 -0700
Subject: [PATCH] add check on hash size passed in

---
 wolfcrypt/src/ecc.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/wolfcrypt/src/ecc.c b/wolfcrypt/src/ecc.c
index 54dad8ada..f7fb835fa 100644
--- a/wolfcrypt/src/ecc.c
+++ b/wolfcrypt/src/ecc.c
@@ -6311,6 +6311,11 @@ int wc_ecc_gen_deterministic_k(const byte* hash, word32 hashSz,
         return BAD_FUNC_ARG;
     }
 
+    if (hashSz != WC_SHA256_DIGEST_SIZE) {
+        WOLFSSL_MSG("Currently only SHA256 digest is supported");
+        return BAD_FUNC_ARG;
+    }
+
     if (mp_unsigned_bin_size(priv) > MAX_ECC_BYTES) {
         WOLFSSL_MSG("private key larger than max expected!");
         return BAD_FUNC_ARG;