• Stefan Berger's avatar
    crypto: ecdh - Pass private key in proper byte order to check valid key · bd955a4e
    Stefan Berger authored
    ecc_is_key_valid expects a key with the most significant digit in the last
    entry of the digit array. Currently ecdh_set_secret passes a reversed key
    to ecc_is_key_valid that then passes the rather simple test checking
    whether the private key is in range [2, n-3]. For all current ecdh-
    supported curves (NIST P192/256/384) the 'n' parameter is a rather large
    number, therefore easily passing this test.
    
    Throughout the ecdh and ecc codebase the variable 'priv' is used for a
    private_key holding the bytes in proper byte order. Therefore, introduce
    priv in ecdh_set_secret and copy the bytes from ctx->private_key into
    priv in proper byte order by using ecc_swap_digits. Pass priv to
    ecc_is_valid_key.
    
    Cc: Ard Biesheuvel <ardb@kernel.org>
    Cc: Salvatore Benedetto <salvatore.benedetto@intel.com>
    Signed-off-by: default avatarStefan Berger <stefanb@linux.ibm.com>
    Acked-by: default avatarJarkko Sakkinen <jarkko@kernel.org>
    Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
    bd955a4e
ecdh.c 5.9 KB