openssl/include
Shane Lontis e454a3934c Add a range check (from SP800-56Ar3) to DH key derivation.
Fixes #14401

Note that this moves the public key check out of DH compute_key() since
key validation does not belong inside this primitive..
The check has been moved to the EVP_PKEY_derive_set_peer() function so that
it generally applies to all exchange operations.. Use EVP_PKEY_derive_set_peer_ex()
to disable this behaviour.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14717)
2021-04-01 09:07:08 +10:00
..
crypto Add a range check (from SP800-56Ar3) to DH key derivation. 2021-04-01 09:07:08 +10:00
internal Fix a windows build break 2021-03-24 10:04:08 +10:00
openssl Add a range check (from SP800-56Ar3) to DH key derivation. 2021-04-01 09:07:08 +10:00