Gilles Peskine f00f152444 Add output size parameter to signature functions
The functions mbedtls_pk_sign(), mbedtls_pk_sign_restartable(),
mbedtls_ecdsa_write_signature() and mbedtls_ecdsa_write_signature_restartable()
now take an extra parameter indicating the size of the output buffer for the
signature.

No change to RSA because for RSA, the output size is trivial to calculate.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-06-25 00:46:22 +02:00

507 B

Extra parameter for the output buffer size

The following functions now take an extra parameter indicating the size of the output buffer:

  • mbedtls_ecdsa_write_signature(), mbedtls_ecdsa_write_signature_restartable()
  • mbedtls_pk_sign(), mbedtls_pk_sign_restartable()

The requirements for the output buffer have not changed, but passing a buffer that is too small now reliably causes the functions to return an error, rather than overflowing the buffer.