feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Fix for ECC minimum key size, which is 112 bits.

Browse Source
This commit is contained in:
David Garske
2020-10-16 10:51:30 -07:00
parent 6ac1fc5cff
commit d7dee5d9e6
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/ssl.c
View File

@@ -10151,7 +10151,7 @@ int wolfSSL_use_certificate_chain_file_format(WOLFSSL* ssl, const char* file,
#ifdef HAVE_ECC #ifdef HAVE_ECC
/* Set Temp CTX EC-DHE size in octets, should be 20 - 66 for 160 - 521 bit */ /* Set Temp CTX EC-DHE size in octets, should be 14 - 66 for 112 - 521 bit */
int wolfSSL_CTX_SetTmpEC_DHE_Sz(WOLFSSL_CTX* ctx, word16 sz) int wolfSSL_CTX_SetTmpEC_DHE_Sz(WOLFSSL_CTX* ctx, word16 sz)
{ {
if (ctx == NULL) if (ctx == NULL)
@@ -10180,7 +10180,7 @@ int wolfSSL_CTX_SetTmpEC_DHE_Sz(WOLFSSL_CTX* ctx, word16 sz)
} }
/* Set Temp SSL EC-DHE size in octets, should be 20 - 66 for 160 - 521 bit */ /* Set Temp SSL EC-DHE size in octets, should be 14 - 66 for 112 - 521 bit */
int wolfSSL_SetTmpEC_DHE_Sz(WOLFSSL* ssl, word16 sz) int wolfSSL_SetTmpEC_DHE_Sz(WOLFSSL* ssl, word16 sz)
{ {
if (ssl == NULL || sz < ECC_MINSIZE || sz > ECC_MAXSIZE) if (ssl == NULL || sz < ECC_MINSIZE || sz > ECC_MAXSIZE)

2
wolfssl/wolfcrypt/ecc.h
View File

@@ -125,7 +125,7 @@ enum {
ECC_MAXNAME = 16, /* MAX CURVE NAME LENGTH */ ECC_MAXNAME = 16, /* MAX CURVE NAME LENGTH */
SIG_HEADER_SZ = 7, /* ECC signature header size (30 81 87 02 42 [R] 02 42 [S]) */ SIG_HEADER_SZ = 7, /* ECC signature header size (30 81 87 02 42 [R] 02 42 [S]) */
ECC_BUFSIZE = 256, /* for exported keys temp buffer */ ECC_BUFSIZE = 256, /* for exported keys temp buffer */
ECC_MINSIZE = 20, /* MIN Private Key size */ ECC_MINSIZE = 14, /* MIN Private Key size */
ECC_MAXSIZE = 66, /* MAX Private Key size */ ECC_MAXSIZE = 66, /* MAX Private Key size */
ECC_MAXSIZE_GEN = 74, /* MAX Buffer size required when generating ECC keys*/ ECC_MAXSIZE_GEN = 74, /* MAX Buffer size required when generating ECC keys*/
ECC_MAX_OID_LEN = 16, ECC_MAX_OID_LEN = 16,