aboutsummaryrefslogtreecommitdiffstats
path: root/common/compliance.c
diff options
context:
space:
mode:
authorJustus Winter <[email protected]>2017-06-01 09:56:42 +0000
committerJustus Winter <[email protected]>2017-06-01 10:26:17 +0000
commit3b70f62423041e614332b90d782576ee6868a030 (patch)
tree17cf688f937543758fb1b4f1ddb7a470f0f22752 /common/compliance.c
parentgpg,common: Move the compliance framework. (diff)
downloadgnupg-3b70f62423041e614332b90d782576ee6868a030.tar.gz
gnupg-3b70f62423041e614332b90d782576ee6868a030.zip
common: Improve checking for compliance with CO_DE_VS.
* common/compliance.c (gnupg_pk_is_compliant): Only certain RSA key sizes are compliant. Signed-off-by: Justus Winter <[email protected]>
Diffstat (limited to 'common/compliance.c')
-rw-r--r--common/compliance.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/common/compliance.c b/common/compliance.c
index 73c7ad724..c0b69843b 100644
--- a/common/compliance.c
+++ b/common/compliance.c
@@ -86,7 +86,9 @@ gnupg_pk_is_compliant (enum gnupg_compliance_mode compliance, int algo,
break;
case is_rsa:
- result = (keylength >= 2048);
+ result = (keylength == 2048
+ || keylength == 3072
+ || keylength == 4096);
break;
case is_ecc: