Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cleanup RSA PKCS#1 v1.5 signature verification (CVE-2021-30130) #1635

Merged
merged 16 commits into from Apr 6, 2021
Merged

cleanup RSA PKCS#1 v1.5 signature verification (CVE-2021-30130) #1635

merged 16 commits into from Apr 6, 2021

Commits on Apr 2, 2021

  1. ASN1: don't allow last octet in OID to have MSB set

    @terrafrost
    terrafrost committed Apr 2, 2021
    Copy the full SHA
    b90c332 View commit details
    Browse the repository at this point in the history

  2. ASN1: tweaks to tag decoding

    @terrafrost
    terrafrost committed Apr 2, 2021
    Copy the full SHA
    95f597c View commit details
    Browse the repository at this point in the history

Commits on Apr 3, 2021

  1. ASN1: uncomment out extra validation code

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    a589442 View commit details
    Browse the repository at this point in the history

  2. Tests/ASN1: add test for null garbage bytes

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    dbd210c View commit details
    Browse the repository at this point in the history

  3. Tests/ASN1: add test for OID garbage bytes

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    6be326e View commit details
    Browse the repository at this point in the history

  4. ASN1: make sure constructed bit is what it ought to be

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    8b8cbec View commit details
    Browse the repository at this point in the history

  5. Tests/ASN1: add tests for constructed mismatches

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    c1d21ed View commit details
    Browse the repository at this point in the history

  6. Tests/ASN1: test for bad tag

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    10cee45 View commit details
    Browse the repository at this point in the history

  7. ASN1: fail when encountering unsupported tags

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    e02c845 View commit details
    Browse the repository at this point in the history

  8. RSA: support "strict" PKCS1 sigs without NULLs

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    9af9d69 View commit details
    Browse the repository at this point in the history

  9. Test/RSA: add test for "strict" PKCS1 sigs without NULLs

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    7a5846c View commit details
    Browse the repository at this point in the history

  10. RSA: tweak to new validation method

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    4a3e08c View commit details
    Browse the repository at this point in the history

  11. Tests/RSA: test requires sha256

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    5fca2bc View commit details
    Browse the repository at this point in the history

  12. CS adjustments

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    581fbdb View commit details
    Browse the repository at this point in the history

  13. RSA: misc fixes for 'without NULL' PKCS1 signature validation

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    8af4280 View commit details
    Browse the repository at this point in the history

  14. RSA: fix for PHP8

    @terrafrost
    terrafrost committed Apr 3, 2021
    Copy the full SHA
    149b4d2 View commit details
    Browse the repository at this point in the history