diff options
| author | Matt Caswell <matt@openssl.org> | 2017-10-18 10:23:33 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2017-10-23 14:00:26 +0100 |
| commit | c9fe362303fc54ff19bde7511475f28663f7d554 (patch) | |
| tree | 7ec0b9c832687ac1889224eaae1207c72357da8e | |
| parent | fb9163ba4ddd95e9516fbd8695542460507ef3e6 (diff) | |
| download | openssl-c9fe362303fc54ff19bde7511475f28663f7d554.tar.gz | |
Correct value for BN_security_bits()
The function BN_security_bits() uses the values from SP800-57 to assign
security bit values for different FF key sizes. However the value for 192
security bits is wrong. SP800-57 has it as 7680 but the code had it as
7690.
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4546)
| -rw-r--r-- | crypto/bn/bn_lib.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/bn/bn_lib.c b/crypto/bn/bn_lib.c index 7571561f9c..dd79f94502 100644 --- a/crypto/bn/bn_lib.c +++ b/crypto/bn/bn_lib.c @@ -812,7 +812,7 @@ int BN_security_bits(int L, int N) int secbits, bits; if (L >= 15360) secbits = 256; - else if (L >= 7690) + else if (L >= 7680) secbits = 192; else if (L >= 3072) secbits = 128; |