stefanberger / libtpms / 1724

77%

master: 77%

push

travis-ci-com

tpm2: Always return a value after pkcs1-padded RSA decryption

To avoid Bleichenbacher type of attacks we always return a decrypted value
when doing pkcs1-padded RSA decryption. Either the value is the proper
decrypted value or the returned value is a deterministic random value
generated from the input ciphertext and the RSA key's sensitive part.

If TPM 2 code is the spec then this change makes the TPM 2 implementation
non-compliant to the TPM 2 spec.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

19 of 19 new or added lines in 1 file covered. (100.0%)

28922 of 37368 relevant lines covered (77.4%)

89005.68 hits per line