> -----Original Message----- > From: Sucharitha Sarananaga <[email protected]> > Sent: Friday, October 9, 2026 5:06 PM > To: [email protected] > Cc: Akhil Goyal <[email protected]>; [email protected]; Ankur Dwivedi > <[email protected]>; Anoob Joseph <[email protected]>; Tejasree > Kondoj <[email protected]>; [email protected]; [email protected]; > [email protected]; Gowrishankar Muthukrishnan > <[email protected]>; Sucharitha Sarananaga > <[email protected]> > Subject: [PATCH] crypto/cnxk: improve RSA private key validation > > Add upfront RSA modulus length validation and reject zero-length or > unsupported modulus sizes. Validate CRT key component pointers and > lengths, validate private exponent length, and derive the actual CRT > key size from component lengths instead of relying solely on modulus > size. > > Also round up the half-modulus bound used for CRT parameters so > odd-length moduli do not incorrectly reject valid factors. > > These checks ensure RSA key material fits within CNXK hardware limits, > prevent invalid parameter acceptance, and avoid potential NULL pointer > dereferences. > > Signed-off-by: Sucharitha Sarananaga <[email protected]> Applied to dpdk-next-crypto Thanks.
