mirror of
git://git.gnupg.org/gnupg.git
synced 2025-07-03 22:56:33 +02:00
sm: Exclude rsaPSS from de-vs compliance mode.
* common/compliance.h (PK_ALGO_FLAG_RSAPSS): New. * common/compliance.c (gnupg_pk_is_compliant): Add arg alog_flags and test rsaPSS. Adjust all callers. (gnupg_pk_is_allowed): Ditto. * sm/misc.c (gpgsm_ksba_cms_get_sig_val): New wrapper function. (gpgsm_get_hash_algo_from_sigval): New. * sm/certcheck.c (gpgsm_check_cms_signature): Change type of sigval arg. Add arg pkalgoflags. Use the PK_ALGO_FLAG_RSAPSS. * sm/verify.c (gpgsm_verify): Use the new wrapper and new fucntion to also get the algo flags. Pass algo flags along. Signed-off-by: Werner Koch <wk@gnupg.org>
This commit is contained in:
parent
c1663c690b
commit
969abcf40c
16 changed files with 175 additions and 89 deletions
|
@ -48,11 +48,17 @@ enum pk_use_case
|
|||
PK_USE_SIGNING, PK_USE_VERIFICATION,
|
||||
};
|
||||
|
||||
/* Flags to distinguish public key algorithm variants. */
|
||||
#define PK_ALGO_FLAG_RSAPSS 1 /* Use rsaPSS padding. */
|
||||
|
||||
|
||||
int gnupg_pk_is_compliant (enum gnupg_compliance_mode compliance, int algo,
|
||||
unsigned int algo_flags,
|
||||
gcry_mpi_t key[], unsigned int keylength,
|
||||
const char *curvename);
|
||||
int gnupg_pk_is_allowed (enum gnupg_compliance_mode compliance,
|
||||
enum pk_use_case use, int algo, gcry_mpi_t key[],
|
||||
enum pk_use_case use, int algo,
|
||||
unsigned int algo_flags, gcry_mpi_t key[],
|
||||
unsigned int keylength, const char *curvename);
|
||||
int gnupg_cipher_is_compliant (enum gnupg_compliance_mode compliance,
|
||||
cipher_algo_t cipher,
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue