David Benjamin c1c6eeb5e2 Check d is mostly-reduced in RSA_check_key. ... We don't check it is fully reduced because different implementations use Carmichael vs Euler totients, but if d exceeds n, something is wrong. Note the fixed-width BIGNUM changes already fail operations with oversized d. Update-Note: Some blatantly invalid RSA private keys will be rejected at RSA_check_key time. Note that most of those keys already are not usable with BoringSSL anyway. This CL moves the failure from sign/decrypt to RSA_check_key. Change-Id: I468dbba74a148aa58c5994cc27f549e7ae1486a2 Reviewed-on: https://boringssl-review.googlesource.com/26374 Reviewed-by: Adam Langley <alangley@gmail.com>		2018-03-30 19:54:10 +00:00
..
asn1.errordata	Limit ASN.1 constructed types recursive definition depth	2018-03-27 15:40:37 +00:00
bio.errordata
bn.errordata
cipher.errordata
CMakeLists.txt
conf.errordata
dh.errordata
digest.errordata
dsa.errordata
ec.errordata	Make ECDSA signing 10% faster and plug some timing leaks.	2017-11-22 22:51:40 +00:00
ecdh.errordata
ecdsa.errordata
engine.errordata
err_data_generate.go
err_test.cc	Add the ability to save and restore the error state.	2017-10-09 21:43:13 +00:00
err.c	Add the ability to save and restore the error state.	2017-10-09 21:43:13 +00:00
evp.errordata
hkdf.errordata
internal.h	Add the ability to save and restore the error state.	2017-10-09 21:43:13 +00:00
obj.errordata	Reimplement OBJ_txt2obj and add a lower-level function.	2017-11-27 21:29:00 +00:00
pem.errordata
pkcs7.errordata
pkcs8.errordata
rsa.errordata	Check d is mostly-reduced in RSA_check_key.	2018-03-30 19:54:10 +00:00
ssl.errordata	Push an error if custom private keys fail.	2018-02-01 21:43:42 +00:00
x509.errordata
x509v3.errordata