opentitan
opentitan copied to clipboard
[crypto] Fix a broken trap condition in RSA
Previously, the RSA OAEP decryption logic incorrectly performed a hardware trap after completing the decryption if the passed buffer for the plaintext is exactly the correct size. This PR fixes this bug. The correctness of this fix has been verified using the wycheproof test vectors.
Thanks for the clarification, Jade!
Successfully created backport PR for earlgrey_es_sival:
- #21687