Home GnuPG

cipher:dilithium: Check the label length by caller.

Description

cipher:dilithium: Check the label length by caller.

* cipher/dilithium.h (dilithium_keypair, dilithium_sign)
(dilithium_verify): Return gpg_err_code_t.
* cipher/dilithium.c (dilithium_keypair): Return gpg_err_code_t.
(dilithium_sign, dilithium_verify): Ditto.  Check CTXLEN.
* cipher/pubkey-dilithium.c (mldsa_generate): Follow the change.
(mldsa_sign, mldsa_verify): Likewise.

Reported by Calif.io in collaboration with Claude and Anthropic
Research.

  • GnuPG-bug-id: T8208
  • Co-authored-by: Thai Duong <thai@calif.io>
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Mon, Apr 13, 4:51 AM
Parents
rC5a875908cb95: cipher:dilithium: Fix the glue of libgcrypt.
Branches
Unknown
Tags
Unknown
References
HEAD -> master
Tasks
T8208: Missing bounds check in libgcrypt's Dilithium context handling