commit dc7f3af03ebbba4b0c90f8d95c682dba7d4c70f5
author Adam Langley <agl@golang.org> Wed Oct 05 17:24:36 2016 -0700
committer Adam Langley <agl@golang.org> Mon Oct 10 21:14:46 2016 +0000
tree affb8838d1cdb760aa3168988e1aa9850593ad57
parent d172538b2cfce0c13cee31e647d0367aa8cd2486

ssh: bound DH public values to [2, p-2].

Previously this code bounded the values to [1, p-1]. This protects
against invalid values that could take lots of CPU time to calculate
with. But the standard bounding is [2, p-2] so mirror that.

Since the DH exchange is signed anyway, this is not a security fix.

Change-Id: Ibef01805a596a433b0699d7a09c076344fa8c070
Reviewed-on: https://go-review.googlesource.com/30590
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>