From bd618970c1c67e87676465d765dc6f4c5a9cce0c Mon Sep 17 00:00:00 2001
From: David Garske <david@wolfssl.com>
Date: Wed, 10 Apr 2019 21:18:17 -0700
Subject: [PATCH] Fixed API unit test for `wc_ecc_sig_size` to allow smaller
 result.

---
 tests/api.c         | 2 +-
 wolfcrypt/src/ecc.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/api.c b/tests/api.c
index 87efb38b1..ed5b2d6fa 100644
--- a/tests/api.c
+++ b/tests/api.c
@@ -14737,7 +14737,7 @@ static int test_wc_ecc_sig_size (void)
 
     if (ret == 0) {
         ret = wc_ecc_sig_size(&key);
-        if (ret == (2 * keySz + SIG_HEADER_SZ + ECC_MAX_PAD_SZ)) {
+        if (ret <= (2 * keySz + SIG_HEADER_SZ + ECC_MAX_PAD_SZ)) {
             ret = 0;
         }
     }
diff --git a/wolfcrypt/src/ecc.c b/wolfcrypt/src/ecc.c
index 5fd514e40..05c0a9069 100644
--- a/wolfcrypt/src/ecc.c
+++ b/wolfcrypt/src/ecc.c
@@ -4236,7 +4236,6 @@ static int wc_ecc_get_curve_order_bit_count(const ecc_set_type* dp)
     word32 orderBits;
     DECLARE_CURVE_SPECS(curve, 1);
 
-    /* if the input is larger than curve order, we must truncate */
     ALLOC_CURVE_SPECS(1);
     err = wc_ecc_curve_load(dp, &curve, ECC_CURVE_FIELD_ORDER);
     if (err != 0) {
@@ -4272,6 +4271,7 @@ static int wc_ecc_sign_hash_hw(const byte* in, word32 inlen,
             return ECC_BAD_ARG_E;
         }
 
+        /* if the input is larger than curve order, we must truncate */
         if ((inlen * WOLFSSL_BIT_SIZE) > orderBits) {
            inlen = (orderBits + WOLFSSL_BIT_SIZE - 1) / WOLFSSL_BIT_SIZE;
         }