diff options
| author | Denis Kenzior <denkenz@gmail.com> | 2022-08-26 09:51:19 -0500 |
|---|---|---|
| committer | Jarkko Sakkinen <jarkko@kernel.org> | 2023-02-13 10:11:20 +0200 |
| commit | 06527a90b2859a4a31d5eec9b6b4ebfb85c35a2c (patch) | |
| tree | 4c9abca0ebef0b03a009bcd7766c403fb3d02daf /crypto/keywrap.c | |
| parent | 464b034318fae80b3d534361513852d08beef1c5 (diff) | |
| download | linux-crypto-06527a90b2859a4a31d5eec9b6b4ebfb85c35a2c.tar.gz linux-crypto-06527a90b2859a4a31d5eec9b6b4ebfb85c35a2c.zip | |
KEYS: asymmetric: Fix ECDSA use via keyctl uapi
When support for ECDSA keys was added, constraints for data & signature
sizes were never updated. This makes it impossible to use such keys via
keyctl API from userspace.
Update constraint on max_data_size to 64 bytes in order to support
SHA512-based signatures. Also update the signature length constraints
per ECDSA signature encoding described in RFC 5480.
Fixes: 2ceaf2ab3fcf ("x509: Add support for parsing x509 certs with ECDSA keys")
Signed-off-by: Denis Kenzior <denkenz@gmail.com>
Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
Diffstat (limited to 'crypto/keywrap.c')
0 files changed, 0 insertions, 0 deletions