From 41626d7b19333c298255ff50d71169d50e320c42 Mon Sep 17 00:00:00 2001
From: Vitezslav Cizek <vcizek@suse.com>
Date: Thu, 29 Oct 2015 14:00:26 +0100
Subject: [PATCH 03/11] PBKDF2: add upper bound for derived key length

• cipher/kdf.c (_gcry_kdf_pkdf2): limit dkLen. --

Add a missing step 1 from PBKDF specification.

Signed-off-by: Vitezslav Cizek <vcizek@suse.com>

cipher/kdf.c | 11 ++++++++---
1 file changed, 8 insertions(+), 3 deletions(-)

2.6.2

See T1736: FIPS 186-4 compliance patches