generic-library/ssh2
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

diffie_hellman_sha256: convert bytes to bits

Browse Source 
As otherwise we get far too small numbers.

Reported-by: Andreas Schneider

CVE-2016-0787
This commit is contained in:
Daniel Stenberg
2016-02-11 13:52:20 +01:00
parent d453f4ce3c
commit ca5222ea81
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/kex.c
View File

@@ -753,7 +753,7 @@ static int diffie_hellman_sha256(LIBSSH2_SESSION *session,
memset(&exchange_state->req_state, 0, sizeof(packet_require_state_t)); memset(&exchange_state->req_state, 0, sizeof(packet_require_state_t));
/* Generate x and e */ /* Generate x and e */
_libssh2_bn_rand(exchange_state->x, group_order, 0, -1); _libssh2_bn_rand(exchange_state->x, group_order * 8 - 1, 0, -1);
_libssh2_bn_mod_exp(exchange_state->e, g, exchange_state->x, p, _libssh2_bn_mod_exp(exchange_state->e, g, exchange_state->x, p,
exchange_state->ctx); exchange_state->ctx);