Messages in this thread | | | Date | Fri, 23 Jun 2023 16:22:19 +0800 | From | Herbert Xu <> | Subject | Re: [PATCH] crypto: rsa - allow only odd e and restrict value in FIPS mode |
| |
On Tue, Jun 13, 2023 at 04:17:31PM +0000, Mahmoud Adam wrote: > check if rsa public exponent is odd and check its value is between > 2^16 < e < 2^256. > > FIPS 186-5 DSS (page 35)[1] specify that: > 1. The public exponent e shall be selected with the following constraints: > (a) The public verification exponent e shall be selected prior to > generating the primes, p and q, and the private signature exponent > d. > (b) The exponent e shall be an odd positive integer such that: > 2^16 < e < 2^256. > > [1] https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf > > Signed-off-by: Mahmoud Adam <mngyadam@amazon.com> > --- > crypto/rsa.c | 36 ++++++++++++++++++++++++++++++++++++ > 1 file changed, 36 insertions(+)
Patch applied. Thanks. -- Email: Herbert Xu <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
| |