|
 |
66e42d |
diff -up libgcrypt-1.8.0/cipher/dsa.c.tests libgcrypt-1.8.0/cipher/dsa.c
|
|
|
66e42d |
--- libgcrypt-1.8.0/cipher/dsa.c.tests 2016-04-07 17:30:08.000000000 +0200
|
|
|
66e42d |
+++ libgcrypt-1.8.0/cipher/dsa.c 2017-08-15 15:10:39.551600227 +0200
|
|
|
66e42d |
@@ -457,11 +457,22 @@ generate_fips186 (DSA_secret_key *sk, un
|
|
|
66e42d |
&prime_q, &prime_p,
|
|
|
66e42d |
r_counter,
|
|
|
66e42d |
r_seed, r_seedlen);
|
|
|
66e42d |
- else
|
|
|
66e42d |
- ec = _gcry_generate_fips186_3_prime (nbits, qbits, NULL, 0,
|
|
|
66e42d |
+ else if (!domain->p || !domain->q)
|
|
|
66e42d |
+ ec = _gcry_generate_fips186_3_prime (nbits, qbits,
|
|
|
66e42d |
+ initial_seed.seed,
|
|
|
66e42d |
+ initial_seed.seedlen,
|
|
|
66e42d |
&prime_q, &prime_p,
|
|
|
66e42d |
r_counter,
|
|
|
66e42d |
r_seed, r_seedlen, NULL);
|
|
|
66e42d |
+ else
|
|
|
66e42d |
+ {
|
|
|
66e42d |
+ /* Domain parameters p and q are given; use them. */
|
|
|
66e42d |
+ prime_p = mpi_copy (domain->p);
|
|
|
66e42d |
+ prime_q = mpi_copy (domain->q);
|
|
|
66e42d |
+ gcry_assert (mpi_get_nbits (prime_p) == nbits);
|
|
|
66e42d |
+ gcry_assert (mpi_get_nbits (prime_q) == qbits);
|
|
|
66e42d |
+ ec = 0;
|
|
|
66e42d |
+ }
|
|
|
66e42d |
sexp_release (initial_seed.sexp);
|
|
|
66e42d |
if (ec)
|
|
|
66e42d |
goto leave;
|
|
|
66e42d |
@@ -855,13 +866,12 @@ dsa_generate (const gcry_sexp_t genparms
|
|
|
66e42d |
sexp_release (l1);
|
|
|
66e42d |
sexp_release (domainsexp);
|
|
|
66e42d |
|
|
|
66e42d |
- /* Check that all domain parameters are available. */
|
|
|
66e42d |
- if (!domain.p || !domain.q || !domain.g)
|
|
|
66e42d |
+ /* Check that p and q domain parameters are available. */
|
|
|
66e42d |
+ if (!domain.p || !domain.q || (!domain.g && !(flags & PUBKEY_FLAG_USE_FIPS186)))
|
|
|
66e42d |
{
|
|
|
66e42d |
_gcry_mpi_release (domain.p);
|
|
|
66e42d |
_gcry_mpi_release (domain.q);
|
|
|
66e42d |
_gcry_mpi_release (domain.g);
|
|
|
66e42d |
- sexp_release (deriveparms);
|
|
|
66e42d |
return GPG_ERR_MISSING_VALUE;
|
|
|
66e42d |
}
|
|
|
66e42d |
|
|
|
66e42d |
diff -up libgcrypt-1.8.0/cipher/rsa.c.tests libgcrypt-1.8.0/cipher/rsa.c
|
|
|
66e42d |
--- libgcrypt-1.8.0/cipher/rsa.c.tests 2017-07-06 10:21:36.000000000 +0200
|
|
|
66e42d |
+++ libgcrypt-1.8.0/cipher/rsa.c 2017-08-15 15:10:39.551600227 +0200
|
|
|
66e42d |
@@ -696,7 +696,7 @@ generate_x931 (RSA_secret_key *sk, unsig
|
|
|
66e42d |
|
|
|
66e42d |
*swapped = 0;
|
|
|
66e42d |
|
|
|
66e42d |
- if (e_value == 1) /* Alias for a secure value. */
|
|
|
66e42d |
+ if (e_value == 1 || e_value == 0) /* Alias for a secure value. */
|
|
|
66e42d |
e_value = 65537;
|
|
|
66e42d |
|
|
|
66e42d |
/* Point 1 of section 4.1: k = 1024 + 256s with S >= 0 */
|
|
|
66e42d |
diff -up libgcrypt-1.8.0/tests/keygen.c.tests libgcrypt-1.8.0/tests/keygen.c
|
|
|
66e42d |
--- libgcrypt-1.8.0/tests/keygen.c.tests 2017-08-15 15:10:39.551600227 +0200
|
|
|
66e42d |
+++ libgcrypt-1.8.0/tests/keygen.c 2017-08-15 15:16:05.433176171 +0200
|
|
|
66e42d |
@@ -200,11 +200,11 @@ check_rsa_keys (void)
|
|
|
66e42d |
|
|
|
66e42d |
|
|
|
66e42d |
if (verbose)
|
|
|
66e42d |
- info ("creating 512 bit RSA key with e=257\n");
|
|
|
66e42d |
+ info ("creating 1024 bit RSA key with e=257\n");
|
|
|
66e42d |
rc = gcry_sexp_new (&keyparm,
|
|
|
66e42d |
"(genkey\n"
|
|
|
66e42d |
" (rsa\n"
|
|
|
66e42d |
- " (nbits 3:512)\n"
|
|
|
66e42d |
+ " (nbits 4:1024)\n"
|
|
|
66e42d |
" (rsa-use-e 3:257)\n"
|
|
|
66e42d |
" ))", 0, 1);
|
|
|
66e42d |
if (rc)
|
|
|
66e42d |
@@ -225,11 +225,11 @@ check_rsa_keys (void)
|
|
|
66e42d |
gcry_sexp_release (key);
|
|
|
66e42d |
|
|
|
66e42d |
if (verbose)
|
|
|
66e42d |
- info ("creating 512 bit RSA key with default e\n");
|
|
|
66e42d |
+ info ("creating 1024 bit RSA key with default e\n");
|
|
|
66e42d |
rc = gcry_sexp_new (&keyparm,
|
|
|
66e42d |
"(genkey\n"
|
|
|
66e42d |
" (rsa\n"
|
|
|
66e42d |
- " (nbits 3:512)\n"
|
|
|
66e42d |
+ " (nbits 4:1024)\n"
|
|
|
66e42d |
" (rsa-use-e 1:0)\n"
|
|
|
66e42d |
" ))", 0, 1);
|
|
|
66e42d |
if (rc)
|
|
|
66e42d |
@@ -309,12 +309,12 @@ check_dsa_keys (void)
|
|
|
66e42d |
}
|
|
|
66e42d |
|
|
|
66e42d |
if (verbose)
|
|
|
66e42d |
- info ("creating 1536 bit DSA key\n");
|
|
|
66e42d |
+ info ("creating 2048 bit DSA key\n");
|
|
|
66e42d |
rc = gcry_sexp_new (&keyparm,
|
|
|
66e42d |
"(genkey\n"
|
|
|
66e42d |
" (dsa\n"
|
|
|
66e42d |
- " (nbits 4:1536)\n"
|
|
|
66e42d |
- " (qbits 3:224)\n"
|
|
|
66e42d |
+ " (nbits 4:2048)\n"
|
|
|
66e42d |
+ " (qbits 3:256)\n"
|
|
|
66e42d |
" ))", 0, 1);
|
|
|
66e42d |
if (rc)
|
|
|
66e42d |
die ("error creating S-expression: %s\n", gpg_strerror (rc));
|
|
|
66e42d |
diff -up libgcrypt-1.8.0/tests/pubkey.c.tests libgcrypt-1.8.0/tests/pubkey.c
|
|
|
66e42d |
--- libgcrypt-1.8.0/tests/pubkey.c.tests 2017-01-18 15:24:25.000000000 +0100
|
|
|
66e42d |
+++ libgcrypt-1.8.0/tests/pubkey.c 2017-08-15 15:10:39.552600207 +0200
|
|
|
66e42d |
@@ -595,7 +595,7 @@ get_dsa_key_fips186_with_seed_new (gcry_
|
|
|
66e42d |
" (use-fips186)"
|
|
|
66e42d |
" (transient-key)"
|
|
|
66e42d |
" (derive-parms"
|
|
|
66e42d |
- " (seed #0cb1990c1fd3626055d7a0096f8fa99807399871#))))",
|
|
|
66e42d |
+ " (seed #8b4c4d671fff82e8ed932260206d0571e3a1c2cee8cd94cb73fe58f9b67488fa#))))",
|
|
|
66e42d |
0, 1);
|
|
|
66e42d |
if (rc)
|
|
|
66e42d |
die ("error creating S-expression: %s\n", gcry_strerror (rc));
|