diff options
| author | David Benjamin <davidben@chromium.org> | 2015-09-23 19:23:01 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2015-09-23 23:35:47 +0300 |
| commit | 4c60d356a926b68ac20e8090755799e1525874f0 (patch) | |
| tree | ca34e35dbce6f868ebc43f061a692e2a80aed9e1 /include/openssl/bn.h | |
| parent | d7fe75ca5f167944e5c8d46b1058d8bd861159e6 (diff) | |
Work around even more Estonian ID card misissuances.
Not content with signing negative RSA moduli, still other Estonian IDs have too
many leading zeros. Work around those too.
This workaround will be removed in six months.
BUG=534766
Change-Id: Ica23b1b1499f9dbe39e94cf7b540900860e8e135
Reviewed-on: https://boringssl-review.googlesource.com/5980
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'include/openssl/bn.h')
| -rw-r--r-- | include/openssl/bn.h | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/include/openssl/bn.h b/include/openssl/bn.h index d85ec863..8de8cc49 100644 --- a/include/openssl/bn.h +++ b/include/openssl/bn.h @@ -304,9 +304,8 @@ OPENSSL_EXPORT BN_ULONG BN_get_word(const BIGNUM *bn); * result to |ret|. It returns one on success and zero on failure. */ OPENSSL_EXPORT int BN_cbs2unsigned(CBS *cbs, BIGNUM *ret); -/* BN_cbs2unsigned_buggy acts like |BN_cbs2unsigned| but tolerates negative - * INTEGERs. This is to work around buggy encoders which drop the 00 padding - * byte. Do not use this function. */ +/* BN_cbs2unsigned_buggy acts like |BN_cbs2unsigned| but tolerates some invalid + * encodings. Do not use this function. */ OPENSSL_EXPORT int BN_cbs2unsigned_buggy(CBS *cbs, BIGNUM *ret); /* BN_bn2cbb marshals |bn| as a non-negative DER INTEGER and appends the result |