Simon Tatham 8957e613bc Add missing sanity checks in ssh_dss_verify. ... The standard says we should be checking that both r,s are in the range [1,q-1]. Previously we were effectively reducing s mod q in the course of inversion, and modinv() was guaranteeing never to return zero; the remaining missing checks were benign. But the change from Bignum to mp_int altered the error behaviour, and combined with the missing upper bound check on s, made it possible to continue verification with w == 0 mod q, which is a bad case. Added a small DSA test case, including a check that none of these types of signatures validates.		2019-02-10 20:10:41 +00:00
..
sclog	New test system to detect side channels in crypto code.	2019-02-10 13:09:53 +00:00
colours.txt	…
cryptsuite.py	Add missing sanity checks in ssh_dss_verify.	2019-02-10 20:10:41 +00:00
desref.py	Complete rewrite of sshdes.c.	2019-01-18 19:41:23 +00:00
display.txt	…
eccref.py	eccref.py: add a couple more methods to ModP.	2019-01-03 16:56:02 +00:00
lattrs.txt	…
scocols.txt	…
testcrypt.py	testcrypt / cryptsuite: another set of Python 3 fixes.	2019-01-23 23:40:32 +00:00
utf8.txt	…
vt100.txt	…