crypto: dh - check validity of Z before export
authorStephan Müller <smueller@chronox.de>
Mon, 20 Jul 2020 17:08:32 +0000 (19:08 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Fri, 31 Jul 2020 08:08:59 +0000 (18:08 +1000)
commit90fa9ae51c1f2fa932bfa0a4d19163d49f0c1c46
treea1dd10ae32d75c383b00094163c8999fd79e002b
parent4278e9d99e38938a7611b927fa4d73e6c86cb4fc
crypto: dh - check validity of Z before export

SP800-56A rev3 section 5.7.1.1 step 2 mandates that the validity of the
calculated shared secret is verified before the data is returned to the
caller. This patch adds the validation check.

Signed-off-by: Stephan Mueller <smueller@chronox.de>
Acked-by: Neil Horman <nhorman@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/dh.c