Skip to content

Fix ECC public key validation#207

Closed
ColtonWilley wants to merge 0 commit into
wolfSSL:masterfrom
ColtonWilley:wp_ecc_pubkey_validate_fix
Closed

Fix ECC public key validation#207
ColtonWilley wants to merge 0 commit into
wolfSSL:masterfrom
ColtonWilley:wp_ecc_pubkey_validate_fix

Conversation

@ColtonWilley
Copy link
Copy Markdown
Contributor

Fix an issue with ECC public key validation. When asked to validate the public key, if a private key is present we also check the public against the private. This does not work for a KRB5 use case where there is a private value leftover from the original key the key being used was duped from. In this case the public and private keys do not match up, which is fine because we only need to check the private. Needed a bit of logic to trick wolfCrypt into doing ECC public key only validation.

Comment thread src/wp_ecc_kmgmt.c Outdated
padelsbach
padelsbach previously approved these changes Jul 3, 2025
Copy link
Copy Markdown
Contributor

@padelsbach padelsbach left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, nice comments. Couple questions/concerns

Comment thread src/wp_ecc_kmgmt.c Outdated
Comment thread src/wp_ecc_kmgmt.c Outdated
Comment thread src/wp_ecc_kmgmt.c Outdated
Copy link
Copy Markdown
Contributor

@SparkiDev SparkiDev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can't see the assignment to public key.

@ColtonWilley
Copy link
Copy Markdown
Contributor Author

Retest this please.

SparkiDev
SparkiDev previously approved these changes Jul 8, 2025
@ColtonWilley ColtonWilley dismissed SparkiDev’s stale review July 8, 2025 21:54

The merge-base changed after approval.

@ColtonWilley ColtonWilley requested a review from aidangarske July 15, 2025 16:47
aidangarske
aidangarske previously approved these changes Jul 15, 2025
@ColtonWilley ColtonWilley dismissed aidangarske’s stale review July 15, 2025 16:52

The merge-base changed after approval.

@aidangarske aidangarske self-requested a review July 15, 2025 17:42
aidangarske
aidangarske previously approved these changes Jul 15, 2025
@ColtonWilley ColtonWilley dismissed aidangarske’s stale review July 15, 2025 17:43

The merge-base changed after approval.

@aidangarske aidangarske reopened this Jul 15, 2025
@aidangarske aidangarske force-pushed the wp_ecc_pubkey_validate_fix branch from 732c9fc to 7307a6a Compare July 15, 2025 21:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants