openssl/providers/implementations
Neil Horman 8d89050f0f validate requested key length in kdf_pbkdf1_do_derive
When using pbkdf1 key deriviation, it is possible to request a key
length larger than the maximum digest size a given digest can produce,
leading to a read of random stack memory.

fix it by returning an error if the requested key size n is larger than
the EVP_MD_size of the digest

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23174)
2024-01-03 10:05:49 -05:00
..
asymciphers Add missing settable entry OSSL_ASYM_CIPHER_PARAM_OAEP_DIGEST_PROPS for RSA asym 2023-12-29 10:41:06 +01:00
ciphers riscv: Fix mispelling of extension test macro 2024-01-02 11:39:18 +01:00
digests Fix BLAKE2s reporting the same EVP_MD_get_size() as BLAKE2b (64) 2023-11-15 08:41:06 +01:00
encode_decode Restore the meaning of EVP_PKEY_print_private() 2023-10-04 08:10:55 +02:00
exchange Copyright year updates 2023-09-07 09:59:15 +01:00
include/prov Implement BLAKE2s with the same macro as BLAKE2b 2023-11-08 09:42:13 +01:00
kdfs validate requested key length in kdf_pbkdf1_do_derive 2024-01-03 10:05:49 -05:00
kem Copyright year updates 2023-09-07 09:59:15 +01:00
keymgmt Fix new typos found by codespell 2023-12-29 10:12:05 +01:00
macs Ignore OSSL_MAC_PARAM_DIGEST_NOINIT/OSSL_MAC_PARAM_DIGEST_ONESHOT 2023-12-26 10:36:00 -05:00
rands rand: fix seeding from a weak entropy source 2023-10-24 11:14:11 +01:00
signature Initialize dstctx->mgf1_md to NULL in rsa_dupctx function 2023-11-30 18:45:15 +01:00
storemgmt Copyright year updates 2023-09-07 09:59:15 +01:00
build.info Add KEM (Key encapsulation mechanism) support to providers 2020-09-19 18:08:46 +10:00