security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-02 22:46:30 +02:00
Code Activity

* sign.c (do_sign): Accept a truncated hash even for DSA1 keys (be liberal

Browse source 
in what you accept, etc).
This commit is contained in:
David Shaw 2006-06-22 19:17:21 +00:00
parent acbac61bff
commit 059c67ca6d
2 changed files with 13 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
g10/sign.c
View file

@ -319,6 +319,12 @@ do_sign( PKT_secret_key *sk, PKT_signature *sig,
}
else
{
#if 0
/* Disabled for now. It seems reasonable to accept a
truncated hash for a DSA1 key, even though we don't
generate it without --enable-dsa2. Be liberal in what you
accept, etc. */
/* If it's a DSA key, and q is 160 bits, it might be an
old-style DSA key. If the hash doesn't match the q, fail
unless --enable-dsa2 is set. If the q isn't 160 bits, then
@ -333,6 +339,7 @@ do_sign( PKT_secret_key *sk, PKT_signature *sig,
log_error(_("DSA requires the use of a 160 bit hash algorithm\n"));
return G10ERR_GENERAL;
}
#endif
frame = encode_md_value( NULL, sk, md, digest_algo );
if (!frame)