commit cdb968f70ad2fd0ad9f0cc5c18f3cc4781dcb171
author David Brown <david.brown@linaro.org> Mon Jun 05 12:57:26 2017 -0600
committer David Brown <david.brown@linaro.org> Tue Jun 13 16:02:48 2017 -0400
tree 00025160d741688ddaf9962259f6c46b68652600
parent f4e904d4beee1645a01e0cec87350e025e5c3a0f

rsa: Allow RSA key to be larger than we need

Allow the size of bignums in mbed TLS to be configured larger than
needed for RSA2048.  This will waste memory holding the large numbers,
but will still work.

boot/bootutil/src/image_rsa.c

diff --git a/boot/bootutil/src/image_rsa.c b/boot/bootutil/src/image_rsa.c
index fd2d913..7773299 100644
--- a/boot/bootutil/src/image_rsa.c
+++ b/boot/bootutil/src/image_rsa.c
@@ -159,7 +159,7 @@
     uint8_t h2[PSS_HLEN];
     int i;
 
-    if (ctx->len != PSS_EMLEN || PSS_EMLEN != MBEDTLS_MPI_MAX_SIZE) {
+    if (ctx->len != PSS_EMLEN || PSS_EMLEN > MBEDTLS_MPI_MAX_SIZE) {
         return -1;
     }