-
eroman@chromium.org authored
Prior to NSS 3.16.2 there wasn't any validation of the RSA key parameters. This has several consequences: * Importing an RSA private key with another key's public modulus can be used to gain access to that key. * importKey() can succeed for invalid RSA keys (invalid n, e, d, p, q etc). This only affects Linux, since other platforms of Chromium bundle NSS/OpenSSL. BUG=380424,378315 R=rsleevi@chromium.org Review URL: https://codereview.chromium.org/334983006 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@278803 0039d316-1c4b-4281-b951-d872f2087c98
975d7a3b
