cipher: Fix rsa key generation.

NIIBE Yutaka · NIIBE Yutaka · commit 26df4b8d8c93 · 2022-04-19T13:22:52.000+09:00
* cipher/rsa.c (generate_fips): Set the least significant bit. -- Cherry-picked master commit of: 51754fa GnuPG-bug-id: 5919 Fixes-commit: 5f9b3c2 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
diff --git a/cipher/rsa.c b/cipher/rsa.c
@@ -482,6 +482,7 @@ generate_fips (RSA_secret_key *sk, unsigned int nbits, unsigned long use_e,
       if (!testparms)
         {
           _gcry_mpi_randomize (p, pbits, random_level);
+          mpi_set_bit (p, 0);
         }
       if (mpi_cmp (p, minp) < 0)
         {
@@ -514,6 +515,7 @@ generate_fips (RSA_secret_key *sk, unsigned int nbits, unsigned long use_e,
       if (!testparms)
         {
           _gcry_mpi_randomize (q, pbits, random_level);
+          mpi_set_bit (q, 0);
         }
       if (mpi_cmp (q, minp) < 0)
         {

Original file line number	Diff line number	Diff line change
`@@ -482,6 +482,7 @@ generate_fips (RSA_secret_key *sk, unsigned int nbits, unsigned long use_e,`
`482`	`482`	`if (!testparms)`
`483`	`483`	`{`
`484`	`484`	`_gcry_mpi_randomize (p, pbits, random_level);`
	`485`	`+ mpi_set_bit (p, 0);`
`485`	`486`	`}`
`486`	`487`	`if (mpi_cmp (p, minp) < 0)`
`487`	`488`	`{`
`@@ -514,6 +515,7 @@ generate_fips (RSA_secret_key *sk, unsigned int nbits, unsigned long use_e,`
`514`	`515`	`if (!testparms)`
`515`	`516`	`{`
`516`	`517`	`_gcry_mpi_randomize (q, pbits, random_level);`
	`518`	`+ mpi_set_bit (q, 0);`
`517`	`519`	`}`
`518`	`520`	`if (mpi_cmp (q, minp) < 0)`
`519`	`521`	`{`