Attachment 1980231 Details for Bug 2223953 – The patch to disable custom curves

[patch] The patch to disable custom curves

forbid_explicit_ec.diff (text/plain), 1.51 KB, created by Dmitry Belyavskiy on 2023-07-27 09:19:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Dmitry Belyavskiy

Created: 2023-07-27 09:19:28 UTC

Size: 1.51 KB

patch

obsolete

>diff --git a/0012-Disable-explicit-ec.patch b/0012-Disable-explicit-ec.patch
>index 550cdf4..6b9eb34 100644
>--- a/0012-Disable-explicit-ec.patch
>+++ b/0012-Disable-explicit-ec.patch
>@@ -26,6 +26,29 @@ diff -up openssl-3.0.1/crypto/ec/ec_asn1.c.disable_explicit_ec openssl-3.0.1/cry
>      ret->version = priv_key->version;
>  
>      if (priv_key->privateKey) {
>+diff -up openssl-3.0.9/crypto/ec/ec_lib.c.noec openssl-3.0.9/crypto/ec/ec_lib.c
>+--- openssl-3.0.9/crypto/ec/ec_lib.c.noec	2023-07-27 10:32:52.870910095 +0200
>++++ openssl-3.0.9/crypto/ec/ec_lib.c	2023-07-27 10:35:18.029151181 +0200
>+@@ -1728,6 +1728,11 @@ EC_GROUP *EC_GROUP_new_from_params(const
>+         goto err;
>+     }
>+     if (named_group == group) {
>++        if (EC_GROUP_check_named_curve(group, 0, NULL) == NID_undef) {
>++            ERR_raise(ERR_LIB_EC, EC_R_UNKNOWN_GROUP);
>++            goto err;
>++        }
>++#if 0
>+         /*
>+          * If we did not find a named group then the encoding should be explicit
>+          * if it was specified
>+@@ -1743,6 +1748,7 @@ EC_GROUP *EC_GROUP_new_from_params(const
>+             goto err;
>+         }
>+         EC_GROUP_set_asn1_flag(group, OPENSSL_EC_EXPLICIT_CURVE);
>++#endif
>+     } else {
>+         EC_GROUP_free(group);
>+         group = named_group;
> diff -up openssl-3.0.1/test/endecode_test.c.disable_explicit_ec openssl-3.0.1/test/endecode_test.c
> --- openssl-3.0.1/test/endecode_test.c.disable_explicit_ec	2022-03-21 16:55:46.005558779 +0100
> +++ openssl-3.0.1/test/endecode_test.c	2022-03-21 16:56:12.636792762 +0100

Actions: View | Diff

Attachments on bug 2223953: 1976936 | 1977285 | 1980231