tree c5f20d594f4a2ad442d4de74425cc9dab909d82b
parent 6a54b0240dea904b5a823b2b1e01b97c37ac2e8f
author Gilles Peskine <Gilles.Peskine@arm.com> 1508346222 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1508346222 +0200

RSA PSS: fix minimum length check for keys of size 8N+1

The check introduced by the previous security fix was off by one. It
fixed the buffer overflow but was not compliant with the definition of
PSS which technically led to accepting some invalid signatures (but
not signatures made without the private key).