Skip to content

0 length passwords not accepted when importing PKCS8 encrypted key #4716

@engineercrypto

Description

@engineercrypto

One of my colleagues reports that 0 length passwords are not accepted when importing a PKCS8 encrypted key. To see why, go to pem_pkey.c:116 (in branch 1.0.2 stable). Notice that the comparison for password length is <= 0 rather than < 0, which disallows 0 length passwords.

Note that the PKCS 8 and PKCS 5 specifications do not disallow 0 length passwords, so this is a bug.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions