Blame SOURCES/libgcrypt-1.10.0-fips-keygen.patch

7dd5c5
From cd30ed3c0d715aa0c58a32a29cfb1476163a5b94 Mon Sep 17 00:00:00 2001
7dd5c5
From: NIIBE Yutaka <gniibe@fsij.org>
7dd5c5
Date: Wed, 20 Apr 2022 15:09:41 +0900
7dd5c5
Subject: [PATCH] cipher: Change the bounds for RSA key generation round.
7dd5c5
7dd5c5
* cipher/rsa.c (generate_fips): Use 10 for p, 20 for q.
7dd5c5
7dd5c5
--
7dd5c5
7dd5c5
Constants from FIPS 186-5-draft.
7dd5c5
7dd5c5
GnuPG-bug-id: 5919
7dd5c5
Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
7dd5c5
---
7dd5c5
 cipher/rsa.c | 8 ++++----
7dd5c5
 1 file changed, 4 insertions(+), 4 deletions(-)
7dd5c5
7dd5c5
diff --git a/cipher/rsa.c b/cipher/rsa.c
7dd5c5
index 486a34f0..771413b3 100644
7dd5c5
--- a/cipher/rsa.c
7dd5c5
+++ b/cipher/rsa.c
7dd5c5
@@ -476,7 +476,7 @@ generate_fips (RSA_secret_key *sk, unsigned int nbits, unsigned long use_e,
7dd5c5
 
7dd5c5
  retry:
7dd5c5
   /* generate p and q */
7dd5c5
-  for (i = 0; i < 5 * pbits; i++)
7dd5c5
+  for (i = 0; i < 10 * pbits; i++)
7dd5c5
     {
7dd5c5
     ploop:
7dd5c5
       if (!testparms)
7dd5c5
@@ -506,10 +506,10 @@ generate_fips (RSA_secret_key *sk, unsigned int nbits, unsigned long use_e,
7dd5c5
       else if (testparms)
7dd5c5
         goto err;
7dd5c5
     }
7dd5c5
-  if (i >= 5 * pbits)
7dd5c5
+  if (i >= 10 * pbits)
7dd5c5
     goto err;
7dd5c5
 
7dd5c5
-  for (i = 0; i < 5 * pbits; i++)
7dd5c5
+  for (i = 0; i < 20 * pbits; i++)
7dd5c5
     {
7dd5c5
     qloop:
7dd5c5
       if (!testparms)
7dd5c5
@@ -555,7 +555,7 @@ generate_fips (RSA_secret_key *sk, unsigned int nbits, unsigned long use_e,
7dd5c5
       else if (testparms)
7dd5c5
         goto err;
7dd5c5
     }
7dd5c5
-  if (i >= 5 * pbits)
7dd5c5
+  if (i >= 20 * pbits)
7dd5c5
     goto err;
7dd5c5
 
7dd5c5
   if (testparms)
7dd5c5
-- 
7dd5c5
2.37.3
7dd5c5