Re: [PATCH] crypto: rsa - allow only odd e and restrict value in FIPS mode

From: Herbert Xu
Date: Fri Jun 23 2023 - 04:22:34 EST


On Tue, Jun 13, 2023 at 04:17:31PM +0000, Mahmoud Adam wrote:
> check if rsa public exponent is odd and check its value is between
> 2^16 < e < 2^256.
>
> FIPS 186-5 DSS (page 35)[1] specify that:
> 1. The public exponent e shall be selected with the following constraints:
> (a) The public verification exponent e shall be selected prior to
> generating the primes, p and q, and the private signature exponent
> d.
> (b) The exponent e shall be an odd positive integer such that:
> 2^16 < e < 2^256.
>
> [1] https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf
>
> Signed-off-by: Mahmoud Adam <mngyadam@xxxxxxxxxx>
> ---
> crypto/rsa.c | 36 ++++++++++++++++++++++++++++++++++++
> 1 file changed, 36 insertions(+)

Patch applied. Thanks.
--
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt