From: Pekka Riikonen <priikone@silcnet.org>
Date: Sat, 13 Apr 2002 17:15:58 +0000 (+0000)
Subject: 	Check for mandatory random data length if public key auth.
X-Git-Tag: silc.toolkit.0.9~61
X-Git-Url: http://git.silcnet.org/gitweb/?p=silc.git;a=commitdiff_plain;h=9a22681ed0ab81d2222179906e6672418a134d70

	Check for mandatory random data length if public key auth.
---

diff --git a/lib/silccore/silcauth.c b/lib/silccore/silcauth.c
index e38eff0b..0ac79369 100644
--- a/lib/silccore/silcauth.c
+++ b/lib/silccore/silcauth.c
@@ -79,6 +79,12 @@ SilcAuthPayload silc_auth_payload_parse(const unsigned char *data,
     return NULL;
   }
 
+  /* If public key authentication, random data must be at least 128 bytes */
+  if (newp->auth_method == SILC_AUTH_PUBLIC_KEY && newp->random_len < 128) {
+    silc_auth_payload_free(newp);
+    return NULL;
+  }
+
   return newp;
 }