From a2db490de5473af42d7b5a99398c48befe294394 Mon Sep 17 00:00:00 2001
From: Werner Koch <wk@gnupg.org>
Date: Mon, 21 Feb 2022 12:15:15 +0100
Subject: [PATCH] scd:p15: Used extended mode already for RSA 2048

* scd/app-p15.c (do_sign, do_decipher): Replace GT by GE.
--
---
 scd/app-p15.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/scd/app-p15.c b/scd/app-p15.c
index 0530d377c..f65a40a65 100644
--- a/scd/app-p15.c
+++ b/scd/app-p15.c
@@ -5504,7 +5504,7 @@ do_sign (app_t app, ctrl_t ctrl, const char *keyidstr, int hashalgo,
       goto leave;
     }
 
-  if (prkdf->keyalgo == GCRY_PK_RSA && prkdf->keynbits > 2048)
+  if (prkdf->keyalgo == GCRY_PK_RSA && prkdf->keynbits >= 2048)
     {
       exmode = 1;
       le_value = prkdf->keynbits / 8;
@@ -5695,7 +5695,7 @@ do_decipher (app_t app, ctrl_t ctrl, const char *keyidstr,
 
   exmode = le_value = 0;
   padind = 0;
-  if (prkdf->keyalgo == GCRY_PK_RSA && prkdf->keynbits > 2048)
+  if (prkdf->keyalgo == GCRY_PK_RSA && prkdf->keynbits >= 2048)
     {
       exmode = 1;   /* Extended length w/o a limit.  */
       le_value = prkdf->keynbits / 8;