Closed Bug 1303213 Opened 8 years ago Closed 8 years ago

DHE key exchange fails when the peer's dh_Ys is unpadded and shorter than dh_p

Categories

(NSS :: Libraries, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: ttaubert, Assigned: ttaubert)

References

Details

Attachments

(1 file)

When we receive an unpadded dh_Ys with a length in bytes shorter than its dh_p we incorrectly compute the DH key hash and thus the signature verification fails.
Attachment #8791814 - Flags: review?(franziskuskiefer) → review+
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Target Milestone: --- → 3.27
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: