Charles Wilcox reported a signature validation bug with 2500-bit RSA

[u/mdw/putty] / sshrsa.c

diff --git a/sshrsa.c b/sshrsa.c
index b773210..f781736 100644 (file)
--- a/sshrsa.c
+++ b/sshrsa.c
@@ -727,7 +727,7 @@ static int rsa2_verifysig(void *key, char *sig, int siglen,
 
     ret = 1;
 
-    bytes = bignum_bitcount(rsa->modulus) / 8;
+    bytes = (bignum_bitcount(rsa->modulus)+7) / 8;
     /* Top (partial) byte should be zero. */
     if (bignum_byte(out, bytes - 1) != 0)
        ret = 0;