pub/dsa-misc.c: Include a magic prefix in the hashing.

[catacomb] / pub / dsa-misc.c

diff --git a/pub/dsa-misc.c b/pub/dsa-misc.c
index 4f68c7bcd9172a350468317a52996fc8959d4e7a..8b03271be207ef00957c8863d52fec44f8709991 100644 (file)
--- a/pub/dsa-misc.c
+++ b/pub/dsa-misc.c
@@ -84,6 +84,7 @@ mp *dsa_nonce(mp *d, mp *q, mp *x, const octet *m,
   size_t bsz = 2*n + 2*ch->hashsz;
   octet *b = XS_ALLOC(bsz);
   octet *kb = b, *rb = kb + n, *hb = rb + ch->hashsz;
   size_t bsz = 2*n + 2*ch->hashsz;
   octet *b = XS_ALLOC(bsz);
   octet *kb = b, *rb = kb + n, *hb = rb + ch->hashsz;

+  static const char prefix[] = "catacomb-dsa-nonce";

   ghash *h;
 
   mp_storeb(x, kb, n);
   ghash *h;
 
   mp_storeb(x, kb, n);


@@ -92,6 +93,7 @@ mp *dsa_nonce(mp *d, mp *q, mp *x, const octet *m,
   do {
     for (j = 0; j < n; j += ch->hashsz) {
       h = GH_INIT(ch);
   do {
     for (j = 0; j < n; j += ch->hashsz) {
       h = GH_INIT(ch);

+      GH_HASH(h, prefix, sizeof(prefix));

       GH_HASHBUF32(h, kb, n);
       GH_HASHBUF32(h, m, ch->hashsz);
       if (r) GH_HASHBUF32(h, rb, ch->hashsz);
       GH_HASHBUF32(h, kb, n);
       GH_HASHBUF32(h, m, ch->hashsz);
       if (r) GH_HASHBUF32(h, rb, ch->hashsz);