bcrypt: Reject DH keys smaller than 512 bits.

0d95ae42 · Hans Leidekker · Alexandre Julliard · 3ef933c0 · 0d95ae42
Commit 0d95ae42 authored Dec 07, 2023 by Hans Leidekker Committed by Alexandre Julliard Jan 18, 2024
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

bcrypt_main.c dlls/bcrypt/bcrypt_main.c +2 -0

No files found.
--- a/dlls/bcrypt/bcrypt_main.c
+++ b/dlls/bcrypt/bcrypt_main.c
@@ -1210,6 +1210,8 @@ static NTSTATUS key_asymmetric_create( enum alg_id alg_id, ULONG bitlen, struct 
        return STATUS_NOT_IMPLEMENTED;
    }

+    if (alg_id == ALG_ID_DH && bitlen < 512) return STATUS_INVALID_PARAMETER;
+
    if (!(key = calloc( 1, sizeof(*key) ))) return STATUS_NO_MEMORY;
    key->hdr.magic  = MAGIC_KEY;
    key->alg_id     = alg_id;