Closed Bug 1423557 Opened 7 years ago Closed 7 years ago

cryptohi: make RSA-PSS parameter check stricter

Categories

(NSS :: Libraries, enhancement)

Product:
NSS
Component:
Libraries
Type:
enhancement
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: ueno, Assigned: ueno)

References

Details

Attachments

(1 file)

cryptohi: make RSA-PSS parameter check stricter
45 bytes, text/x-phabricator-request
mt
: review+
Details | Review
The code for verifying RSA-PSS signature on certificate accepts invalid hash algorithms as SHA-1 and also doesn't check the value of trailerField. This should be more strict, according to the discussion in bug 1400844.
See Also: → 1400844
Landed as: https://hg.mozilla.org/projects/nss/rev/5a14f42384eb
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Target Milestone: --- → 3.35
Assignee: nobody → dueno
Comment on attachment 8945484 [details] cryptohi: make RSA-PSS parameter check stricter Martin Thomson [:mt:] has approved the revision. https://phabricator.services.mozilla.com/D322
Attachment #8945484 - Flags: review+
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: