CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2021/11/29 13:02:14
Modified files:
lib/libcrypto/dh: dh_check.c
Log message:
Clean up DH_check_pub_key() and ensure that y^q (mod p) == 1.
This aligns our behavior with OpenSSL 1.1.1 which includes a mitigation
for small subgroup attacks. This did not affect LibreSSL since we do
not support X9.42 style parameter files or RFC 5114.
The meat of this commit is from Matt Caswell, OpenSSL b128abc3
ok inoguchi jsing
