mirror of
https://github.com/i2p/i2p.i2p.git
synced 2026-05-17 09:15:24 +00:00
Crypto: Disallow DSA-SHA1 signing k=q
reported by: bottomlineit.co.za
This commit is contained in:
@@ -406,7 +406,7 @@ public final class DSAEngine {
|
||||
boolean ok;
|
||||
do {
|
||||
k = new NativeBigInteger(160, _context.random());
|
||||
ok = k.compareTo(CryptoConstants.dsaq) != 1;
|
||||
ok = k.compareTo(CryptoConstants.dsaq) < 0;
|
||||
ok = ok && !k.equals(BigInteger.ZERO);
|
||||
//System.out.println("K picked (ok? " + ok + "): " + k.bitLength() + ": " + k.toString());
|
||||
} while (!ok);
|
||||
|
||||
Reference in New Issue
Block a user