Skip to content
Commit 10de7b54 authored by Denis Kenzior's avatar Denis Kenzior Committed by Jarkko Sakkinen
Browse files

KEYS: asymmetric: Fix ECDSA use via keyctl uapi



When support for ECDSA keys was added, constraints for data & signature
sizes were never updated.  This makes it impossible to use such keys via
keyctl API from userspace.

Update constraint on max_data_size to 64 bytes in order to support
SHA512-based signatures. Also update the signature length constraints
per ECDSA signature encoding described in RFC 5480.

Fixes: 299f561a ("x509: Add support for parsing x509 certs with ECDSA keys")
Signed-off-by: default avatarDenis Kenzior <denkenz@gmail.com>
Reviewed-by: default avatarStefan Berger <stefanb@linux.ibm.com>
Reviewed-by: default avatarJarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: default avatarJarkko Sakkinen <jarkko@kernel.org>
parent c95e8f6f
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment