Skip to content

Navigation Menu

Sign in
Sign up

Validate DH peer public key subgroup before key agreement - #460

Open
aidangarske wants to merge 4 commits into
wolfSSL:master from
aidangarske:worktree-dh-subgroup-check
Open

Validate DH peer public key subgroup before key agreement #460
aidangarske wants to merge 4 commits into
wolfSSL:master from
aidangarske:worktree-dh-subgroup-check

Conversation

@aidangarske

@aidangarske aidangarske commented Aug 6, 2026

Copy link
Copy Markdown
Member
F-5914

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #460

Scan targets checked: wolfprovider-bugs, wolfprovider-src

Findings: 4
4 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #460

Scan targets checked: wolfprovider-bugs, wolfprovider-src

Findings: 3
3 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

Comment thread src/wp_dh_exch.c
Comment thread test/test_dh.c Outdated
Comment thread test/test_dh.c Outdated
@aidangarske aidangarske added the ci:all PR OSP toggle: run all label Aug 7, 2026
Comment thread test/test_dh.c
}
if (err == 0) {
rc = EVP_PKEY_derive_set_peer(ctx, small);
if (rc == 1) {

@padelsbach padelsbach Aug 28, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we only test if set_peer succeeds?

Comment thread src/wp_dh_exch.c
};

#endif /* WP_HAVE_DH */

@padelsbach padelsbach Aug 28, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: the empty trailing line is dropped. Can we keep it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Lite
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left review comments
@padelsbach padelsbach padelsbach requested changes
@ColtonWilley ColtonWilley Awaiting requested review from ColtonWilley

Requested changes must be addressed to merge this pull request.

Labels

ci:all PR OSP toggle: run all

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

AltStyle によって変換されたページ (->オリジナル) /