From 597253ca171a8ae9f0456323eb3aceb47fd4fde6 Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Mon, 21 Feb 2022 12:15:15 +0100 Subject: [PATCH] scd:p15: Used extended mode already for RSA 2048 * scd/app-p15.c (do_sign, do_decipher): Replace GT by GE. -- --- scd/app-p15.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scd/app-p15.c b/scd/app-p15.c index 4577fbc36..ce832a9bb 100644 --- a/scd/app-p15.c +++ b/scd/app-p15.c @@ -5592,7 +5592,7 @@ do_sign (app_t app, ctrl_t ctrl, const char *keyidstr, int hashalgo, goto leave; } - if (prkdf->keyalgo == GCRY_PK_RSA && prkdf->keynbits > 2048) + if (prkdf->keyalgo == GCRY_PK_RSA && prkdf->keynbits >= 2048) { exmode = 1; le_value = prkdf->keynbits / 8; @@ -5783,7 +5783,7 @@ do_decipher (app_t app, ctrl_t ctrl, const char *keyidstr, exmode = le_value = 0; padind = 0; - if (prkdf->keyalgo == GCRY_PK_RSA && prkdf->keynbits > 2048) + if (prkdf->keyalgo == GCRY_PK_RSA && prkdf->keynbits >= 2048) { exmode = 1; /* Extended length w/o a limit. */ le_value = prkdf->keynbits / 8;