[PATCH 0/2] crypto: rsassa-pkcs1: fix undersized key handling

From: Jérémy Jean

Date: Wed Aug 26 2026 - 06:41:23 EST


PKCS#1 v1.5 requires an encoded message of at least 11 bytes. The
signing and verification functions do not reject smaller RSA modulus
sizes reported by the child implementation.

This series include two patches due to integer underflows:
* one in the signing function that can write OOB,
* one in the verification function that can read 1 byte OOB.

Jérémy Jean (2):
crypto: rsassa-pkcs1: reject undersized keys when signing
crypto: rsassa-pkcs1: reject undersized keys when verifying

crypto/rsassa-pkcs1.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

--
2.47.3