gnunet-svn
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[GNUnet-SVN] r37755 - gnunet/src/util


From: gnunet
Subject: [GNUnet-SVN] r37755 - gnunet/src/util
Date: Mon, 22 Aug 2016 15:56:30 +0200

Author: burdges
Date: 2016-08-22 15:56:30 +0200 (Mon, 22 Aug 2016)
New Revision: 37755

Modified:
   gnunet/src/util/crypto_rsa.c
Log:
Removed duplicate protection agaisnt Lenstra

Now libgcrypt 1.6.4, released 8 Sep 2015 , has its own protection
against Lenstra's attack, added wtih commit
 c17f84bd02d7ee93845e92e20f6ddba814961588 dated 31 Aug 2015.

Do not run GNUNet with an earlier libgcrypt now.



Modified: gnunet/src/util/crypto_rsa.c
===================================================================
--- gnunet/src/util/crypto_rsa.c        2016-08-22 13:42:27 UTC (rev 37754)
+++ gnunet/src/util/crypto_rsa.c        2016-08-22 13:56:30 UTC (rev 37755)
@@ -842,6 +842,10 @@
   }
 
   /* verify signature (guards against Lenstra's attack with fault 
injection...) */
+  /* Removed because Lenstra protection was first added to libgcrypt 1.6.4
+   * with commit c17f84bd02d7ee93845e92e20f6ddba814961588.  Do not run with 
+   * an earlier libgcrypt.  Or uncomment if you must.  */
+  /*
   public_key = GNUNET_CRYPTO_rsa_private_key_get_public (key);
   if (0 !=
       gcry_pk_verify (result,
@@ -855,6 +859,7 @@
     return NULL;
   }
   GNUNET_CRYPTO_rsa_public_key_free (public_key);
+  */
 
   /* return signature */
   gcry_sexp_release (data);




reply via email to

[Prev in Thread] Current Thread [Next in Thread]