Uploaded image for project: 'Erlang/OTP'
  1. Erlang/OTP
  2. ERL-675

RSA options rsa_mgf1_md, rsa_oaep_md, and rsa_oaep_label do not work. (Bad merge of PR-838)

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 21.1
    • Component/s: crypto
    • Labels:
      None

      Description

      PR-838, which reimplemented various parts of the crypto application to use OpenSSL EVP APIs was merged manually. During the manual merge the macro define for HAVE_RSA_OAEP_MD was lost. The result being that setting rsa_mgf1_md and rsa_oaep_md for any other value than sha causes the nif to return not_sup.

      Support for configurable MGF1 digests and OAEP labels is available in OpenSSL version 1.1.0, a cursory look at libressl does not seem to reveal support.

      The defective functionality has been returned in a fork by defining HAVE_RSA_OAEP_MD alongside HAVE_CHACHA20_POLY1305, i.e. OpenSSL >= 1.1.0 and NOT libressl.

        Attachments

          Activity

            People

            Assignee:
            otp_team_ps Team PS
            Reporter:
            sg Stevie Graham
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: