forks/go-ethereum
1
0
Fork 1
mirror of https://github.com/ethereum/go-ethereum.git synced 2026-08-20 10:52:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

crypto/ecies: avoid big integer math in overflow check

Browse source
This commit is contained in:
Felix Lange 2020-03-31 14:51:51 +02:00 committed by GitHub
parent 5b6118e7f2
commit 753f927e31
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
crypto/ecies/ecies.go
View file

@ -143,11 +143,6 @@ var (
ErrInvalidMessage = fmt.Errorf("ecies: invalid message")
)
var (
big2To32 = new(big.Int).Exp(big.NewInt(2), big.NewInt(32), nil)
big2To32M1 = new(big.Int).Sub(big2To32, big.NewInt(1))
)
func incCounter(ctr []byte) {
if ctr[3]++; ctr[3] != 0 {
return
@ -169,8 +164,11 @@ func concatKDF(hash hash.Hash, z, s1 []byte, kdLen int) (k []byte, err error) {
s1 = make([]byte, 0)
}
reps := ((kdLen + 7) * 8) / (hash.Size() * 8)
if big.NewInt(int64(reps)).Cmp(big2To32M1) > 0 {
// reps is the maximum number of iterations of the
// counter hashing loop. This is capped to 32 bits to
// prevent overflow of the counter.
reps := (int64(kdLen) + 7) * 8 / int64(hash.Size()*8)
if reps > int64(^uint32(0)) {
return nil, ErrKeyDataTooLong
}