crypto: rsa-pkcs1pad - only allow with rsa
authorEric Biggers <ebiggers@google.com>
Wed, 19 Jan 2022 00:13:02 +0000 (16:13 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 8 Apr 2022 12:23:01 +0000 (14:23 +0200)
commit9c8d8f87c213cda58b226ec27b41d5d33c22b181
tree020e51eccae540113b606f2e64195bb6a8a7092d
parent1290eb4412aa0f0e9f3434b406dc8e255da85f9e
crypto: rsa-pkcs1pad - only allow with rsa

commit 9b30430ea356f237945e52f8a3a42158877bd5a9 upstream.

The pkcs1pad template can be instantiated with an arbitrary akcipher
algorithm, which doesn't make sense; it is specifically an RSA padding
scheme.  Make it check that the underlying algorithm really is RSA.

Fixes: 3d5b1ecdea6f ("crypto: rsa - RSA padding algorithm")
Cc: <stable@vger.kernel.org> # v4.5+
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/rsa-pkcs1pad.c