openssl/crypto/rsa
Matt Caswell 9bcc9f973b Ensure RSA PSS correctly returns the right default digest
A default digest of SHA256 was being returned for RSA PSS even if the
PSS parameters indicated a different digest must be used. We change this
so that the correct default digest is returned and additionally mark this
as mandatory for PSS.

This bug had an impact on sig alg selection in libssl. Due to this issue
an incorrect sig alg might be selected in the event that a server is
configured with an RSA-PSS cert with parameter restrictions.

Fixes #9545

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/9553)
2019-08-09 13:19:16 +01:00
..
build.info FIPS 186-4 RSA Generation & Validation 2019-03-12 12:00:52 +00:00
rsa_ameth.c Ensure RSA PSS correctly returns the right default digest 2019-08-09 13:19:16 +01:00
rsa_asn1.c constify *_dup() and *i2d_*() and related functions as far as possible, introducing DECLARE_ASN1_DUP_FUNCTION 2019-03-06 16:10:09 +00:00
rsa_chk.c FIPS: Fix compiler errors in rsa_chk.c when building with -DFIPS_MODE 2019-04-30 14:02:22 +02:00
rsa_crpt.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_depr.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_err.c make RSA and DSA operations throw MISSING_PRIVATE_KEY if needed, adapt ECDSA 2019-07-31 16:56:22 +03:00
rsa_gen.c Fix Typos 2019-07-02 14:22:29 +02:00
rsa_lib.c FIPS 186-4 RSA Generation & Validation 2019-03-12 12:00:52 +00:00
rsa_locl.h FIPS 186-4 RSA Generation & Validation 2019-03-12 12:00:52 +00:00
rsa_meth.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_mp.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_none.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_oaep.c SP 800-56B steps enumerated. 2019-04-17 14:26:11 +10:00
rsa_ossl.c make RSA and DSA operations throw MISSING_PRIVATE_KEY if needed, adapt ECDSA 2019-07-31 16:56:22 +03:00
rsa_pk1.c Modify the RSA_private_decrypt functions to check the padding in 2019-03-22 14:46:04 +01:00
rsa_pmeth.c Change default RSA, DSA and DH size to 2048 bit 2019-05-21 16:44:02 +02:00
rsa_prn.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_pss.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_saos.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_sign.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_sp800_56b_check.c FIPS 186-4 RSA Generation & Validation 2019-03-12 12:00:52 +00:00
rsa_sp800_56b_gen.c Fixed unmatched BN_CTX_start/end if an invalid exponent is used. 2019-03-29 12:41:43 +10:00
rsa_ssl.c Modify the RSA_private_decrypt functions to check the padding in 2019-03-22 14:46:04 +01:00
rsa_x931.c Following the license change, modify the boilerplates in crypto/rsa/ 2018-12-06 15:20:59 +01:00
rsa_x931g.c Added NULL check to BN_clear() & BN_CTX_end() 2019-03-19 07:25:48 +01:00