diff options
| author | Ulf Möller <ulf@openssl.org> | 2000-09-13 03:45:54 +0200 |
|---|---|---|
| committer | Ulf Möller <ulf@openssl.org> | 2000-09-13 03:45:54 +0200 |
| commit | c11dead17c0808e1a312ca02a849ed5cdd74c535 (patch) | |
| tree | 4150e025b7e77826ee229ce76891e62edaad34e4 | |
| parent | Clarify some of the I/O issues. (diff) | |
| download | openssl-c11dead17c0808e1a312ca02a849ed5cdd74c535.tar.xz openssl-c11dead17c0808e1a312ca02a849ed5cdd74c535.zip | |
Don't set the two top bits to one when generating a random number < q.:wq
| -rw-r--r-- | crypto/dsa/dsa_key.c | 2 | ||||
| -rw-r--r-- | crypto/dsa/dsa_ossl.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/crypto/dsa/dsa_key.c b/crypto/dsa/dsa_key.c index 5aef2d5fcf..af3c56d770 100644 --- a/crypto/dsa/dsa_key.c +++ b/crypto/dsa/dsa_key.c @@ -84,7 +84,7 @@ int DSA_generate_key(DSA *dsa) i=BN_num_bits(dsa->q); for (;;) { - if (!BN_rand(priv_key,i,1,0)) + if (!BN_rand(priv_key,i,0,0)) goto err; if (BN_cmp(priv_key,dsa->q) >= 0) BN_sub(priv_key,priv_key,dsa->q); diff --git a/crypto/dsa/dsa_ossl.c b/crypto/dsa/dsa_ossl.c index b51cf6ad8d..094356518f 100644 --- a/crypto/dsa/dsa_ossl.c +++ b/crypto/dsa/dsa_ossl.c @@ -181,7 +181,7 @@ static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp, BIGNUM **rp) /* Get random k */ for (;;) { - if (!BN_rand(&k, BN_num_bits(dsa->q), 1, 0)) goto err; + if (!BN_rand(&k, BN_num_bits(dsa->q), 0, 0)) goto err; if (BN_cmp(&k,dsa->q) >= 0) BN_sub(&k,&k,dsa->q); if (!BN_is_zero(&k)) break; |