tree d72fe5ba5bb205a707bdca2f59e35dbb8f043c48
parent 1ad67e1f0ef495d4014b6ffd8f2cf80f91fffbce
author Filippo Valsorda <filippo@golang.org> 1581465217 -0500
committer Filippo Valsorda <filippo@golang.org> 1582223783 +0000

ssh: return an error for malformed ed25519 public keys rather than panic

An attacker can craft an ssh-ed25519 or sk-ssh-ed25519@openssh.com
public key, such that the library will panic when trying to verify a
signature with it. Clients can deliver such a public key and signature
to any golang.org/x/crypto/ssh server with a PublicKeyCallback, and
servers can deliver them to any golang.org/x/crypto/ssh client.

This issue was discovered and reported by Alex Gaynor, Fish in a Barrel,
and is tracked as CVE-2020-9283.

Change-Id: Ie25b78a0b0181fbbc8cc7de4f4e27d908777529c
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/220357
Run-TryBot: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>