Enforce minimum key size when generating RSA key size
Add configuration to enforce minimum size when
generating a RSA key, it's default value is 1024
bits since this the minimum secure value currently
but it can be any value greater than or equal 128
bits. Tests were modifed to accommodate for this
change.
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
diff --git a/library/rsa.c b/library/rsa.c
index 6a74bef..9fd14db 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -550,6 +550,11 @@
goto cleanup;
}
+ if (nbits < MBEDTLS_RSA_MIN_KEY_SIZE) {
+ ret = MBEDTLS_ERR_RSA_BAD_INPUT_DATA;
+ goto cleanup;
+ }
+
/*
* find primes P and Q with Q < P so that:
* 1. |P-Q| > 2^( nbits / 2 - 100 )