File: 05_disable_rsa_shake.patch

package info (click to toggle)
grub2 2.14~git20250718.0e36779-2
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 60,688 kB
  • sloc: ansic: 541,811; asm: 68,074; sh: 9,803; cpp: 2,095; makefile: 1,895; python: 1,518; sed: 446; lex: 393; yacc: 268; awk: 85; lisp: 54; perl: 31
file content (36 lines) | stat: -rw-r--r-- 1,283 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
diff --git a/grub-core/lib/libgcrypt/cipher/rsa-common.c b/grub-core/lib/libgcrypt/cipher/rsa-common.c
index 1920eedd8..c4819208b 100644
--- a/grub-core/lib/libgcrypt-grub/cipher/rsa-common.c
+++ b/grub-core/lib/libgcrypt-grub/cipher/rsa-common.c
@@ -912,6 +912,7 @@ _gcry_rsa_pss_encode (gcry_mpi_t *r_result, unsigned int nbits, int algo,
   memcpy (p, salt, saltlen);
 
   /* Step 9: dbmask = MGF(H, emlen - hlen - 1).  */
+#if 0
   if (algo == GCRY_MD_SHAKE128 || algo == GCRY_MD_SHAKE256)
     {
       gcry_buffer_t iov;
@@ -925,6 +926,7 @@ _gcry_rsa_pss_encode (gcry_mpi_t *r_result, unsigned int nbits, int algo,
                                      &iov, 1);
     }
   else
+#endif
     mgf1 (dbmask, emlen - hlen - 1, h, hlen, algo);
 
   /* Step 10: maskedDB = DB ^ dbMask */
@@ -1086,6 +1088,7 @@ _gcry_rsa_pss_verify (gcry_mpi_t value, int hashed_already,
     }
 
   /* Step 7: dbmask = MGF(H, emlen - hlen - 1).  */
+#if 0
   if (algo == GCRY_MD_SHAKE128 || algo == GCRY_MD_SHAKE256)
     {
       gcry_buffer_t iov;
@@ -1099,6 +1202,7 @@ _gcry_rsa_pss_verify (gcry_mpi_t value, int hashed_already,
                                      &iov, 1);
     }
   else
+#endif
     mgf1 (dbmask, emlen - hlen - 1, h, hlen, algo);
 
   /* Step 8: maskedDB = DB ^ dbMask.  */