freebsd-dev/sys/dev/if_wg
Peter Grehan 5aaea4b99e Always clamp curve25519 keys prior to use.
This fixes an issue where a private key	contained bits that should
have been cleared by the clamping process, but were passed through
to the scalar multiplication routine and resulted in an	invalid
public key.

Issue diagnosed	(and an	initial	fix proposed) by shamaz.mazum in
PR 252894.

This fix suggested by Jason Donenfeld.

PR:		252894
Reported by:	shamaz.mazum
Reviewed by:	dch
MFC after:	3 days
2021-02-03 19:05:09 +10:00
..
include if_wg: appease gcc 2020-12-11 22:52:03 +00:00
module Always clamp curve25519 keys prior to use. 2021-02-03 19:05:09 +10:00