Then the assertion should be removed because as it is now it will
always fail.


> 
> Jeffrey Altman wrote:
> > The code is the same in both 0.9.6- and 0.9.7-beta4.  in 0.9.7-b4
> > there is an assertion added that is being triggered because the buf
> > size is considered too small.  However, tracing through the calls
> > shows that even with a 160bit input only the first byte is ever
> > touched.
> >
> > That does not mean other bytes could not be touched in the future
> > though.
> 
> That depends on the OpenSSL ASN1 code. But as far as I understand
> the code I don't know a possible reason to use any other value of the
> 'buf' array.  In DSA_size() i2d_ASN1_INTEGER() is only called to get
> the max. possible length of the DER encoded integer (r and s) => only 
> the first byte (with data[0] == 0xff) is needed.
> 
> Regards,
> Nils
> 


 Jeffrey Altman * Volunteer Developer      Kermit 95 2.1 GUI available now!!!
 The Kermit Project @ Columbia University  SSH, Secure Telnet, Secure FTP, HTTP
 http://www.kermit-project.org/            Secured with MIT Kerberos, SRP, and 
 [EMAIL PROTECTED]               OpenSSL.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to