mirror of
https://github.com/espressif/mbedtls.git
synced 2025-07-17 07:15:17 +08:00

For a key of size 8N+1, check that the first byte after applying the public key operation is 0 (it could have been 1 instead). The code was incorrectly doing a no-op check instead, which led to invalid signatures being accepted. Not a security flaw, since you would need the private key to craft such an invalid signature, but a bug nonetheless.