openssl/crypto/rsa
slontis 4514e02cdf Check range of RSA plaintext and ciphertext when using no padding.
Fixes #24051

RSA with 'no padding' corresponds to RSAEP/RSADP.
The code was not checking the lower bounds.
The bounds are specified in SP800-56Br2, section 7.1.1.1 and 7.1.2.1
Note that RFC8017 expresses the range in a sentence using the word
between, and there is some ambiguity in this.
The upper bounds have change to match the definition in SP800.

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24061)
2024-04-09 14:30:43 +02:00
..
build.info Remove RSA SSLv23 padding mode 2021-03-01 10:56:12 +01:00
rsa_acvp_test_params.c Update copyright year 2021-04-08 13:04:41 +01:00
rsa_ameth.c rsa/rsa_ameth.c: Add the check for the EVP_MD_get_size() 2024-03-29 15:34:32 -04:00
rsa_asn1.c Update copyright year 2021-04-08 13:04:41 +01:00
rsa_backend.c Copyright year updates 2024-04-09 13:43:26 +02:00
rsa_chk.c Copyright year updates 2023-09-07 09:59:15 +01:00
rsa_crpt.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
rsa_depr.c Update copyright year 2020-04-23 13:55:52 +01:00
rsa_err.c crypto: updates to pass size_t to RAND_bytes_ex() 2021-06-01 18:13:56 +10:00
rsa_gen.c Copyright year updates 2024-04-09 13:43:26 +02:00
rsa_lib.c Copyright year updates 2024-04-09 13:43:26 +02:00
rsa_local.h Copyright year updates 2024-04-09 13:43:26 +02:00
rsa_meth.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
rsa_mp_names.c rsa: add ossl_ prefix to internal rsa_ calls. 2020-10-07 09:04:51 +10:00
rsa_mp.c Replace "a RSA" with "an RSA" 2022-12-07 09:37:25 +11:00
rsa_none.c Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 2020-11-13 09:35:02 +01:00
rsa_oaep.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
rsa_ossl.c Check range of RSA plaintext and ciphertext when using no padding. 2024-04-09 14:30:43 +02:00
rsa_pk1.c Copyright year updates 2023-09-07 09:59:15 +01:00
rsa_pmeth.c rsa/rsa_pmeth.c: Add the checks for the EVP_MD_CTX_get_size() 2024-04-03 11:21:29 +02:00
rsa_prn.c Update copyright year 2021-07-29 15:41:35 +01:00
rsa_pss.c Copyright year updates 2023-09-07 09:59:15 +01:00
rsa_saos.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
rsa_schemes.c rsa: add ossl_ prefix to internal rsa_ calls. 2020-10-07 09:04:51 +10:00
rsa_sign.c Refine the documents of several APIs 2022-12-16 18:59:28 +01:00
rsa_sp800_56b_check.c Copyright year updates 2024-04-09 13:43:26 +02:00
rsa_sp800_56b_gen.c Copyright year updates 2024-04-09 13:43:26 +02:00
rsa_x931.c Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 2020-11-13 09:35:02 +01:00
rsa_x931g.c Copyright year updates 2023-09-07 09:59:15 +01:00