crypto: rsa-pkcs1pad - only allow with rsa
authorEric Biggers <ebiggers@google.com>
Wed, 19 Jan 2022 00:13:02 +0000 (16:13 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 8 Apr 2022 12:39:57 +0000 (14:39 +0200)
commitc1db3f44f252e1f2e9ecd0e7decf23d3f943cafe
tree5d6d9f6c629c787c548836a18b9fe3e073c37416
parent27a6f495b63a1804cc71be45911065db7757a98c
crypto: rsa-pkcs1pad - only allow with rsa

commit 9b30430ea356f237945e52f8a3a42158877bd5a9 upstream.

The pkcs1pad template can be instantiated with an arbitrary akcipher
algorithm, which doesn't make sense; it is specifically an RSA padding
scheme.  Make it check that the underlying algorithm really is RSA.

Fixes: 3d5b1ecdea6f ("crypto: rsa - RSA padding algorithm")
Cc: <stable@vger.kernel.org> # v4.5+
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/rsa-pkcs1pad.c