Skip to content

wc_SrpGetPublic function output incorrect public key value (pub) when padding is needed. #3665

Open
@IOTSecurityHQ

Description

@IOTSecurityHQ

Background: This function wc_SrpGetPublic takes in pointer to variable that will hold public Key. After function executes it writes the computed public key this variable. If public key variable is larger than resulting public key , the public key needs to be padded and done correctly by adding 0 before MSB.

It is not padding right now and expect the user of function to handles it by looking at *size output. This needs to be clearly documented otherwise, it could causes user to unpadded(incorrect) passkey.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions