commit 02cf8234b4d005ecc858bb5f913272b6f70b1bb8
author Raef Coles <raef.coles@arm.com> Fri Oct 07 13:52:47 2022 +0100
committer Raef Coles <raef.coles@arm.com> Thu Oct 13 14:29:22 2022 +0100
tree 902fc3fe66ad28d02b7e2ccba7bf56050c0902bf
parent f36874a53519b03d78690872061e31c4ed860892

Fix ots sig length check in LMS validate function

Signed-off-by: Raef Coles <raef.coles@arm.com>

library/lms.c

diff --git a/library/lms.c b/library/lms.c
index a841179..1e0f319 100644
--- a/library/lms.c
+++ b/library/lms.c
@@ -733,7 +733,7 @@
     ret = mbedtls_lmots_sign( &ctx->ots_private_keys[q_leaf_identifier],
                               f_rng, p_rng, msg, msg_size,
                               sig + SIG_OTS_SIG_OFFSET,
-                              MBEDTLS_LMS_SIG_LEN(ctx->params.type, ctx->params.otstype),
+                              MBEDTLS_LMS_SIG_LEN(ctx->params.type, ctx->params.otstype) - SIG_OTS_SIG_OFFSET,
                               NULL );
     if( ret != 0 )
     {