tree 40081a5c302842cd8dc3cc8f102be8196e2919cf
parent 511bb84c609e1b39cc9e470f4f9132accb412591
author Gilles Peskine <Gilles.Peskine@arm.com> 1508346222 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1508346802 +0200

RSA PSS: fix minimum length check for keys of size 8N+1

The check introduced by the previous security fix was off by one. It
fixed the buffer overflow but was not compliant with the definition of
PSS which technically led to accepting some invalid signatures (but
not signatures made without the private key).