Look for dodgy public exponent values.

InCommon · Mar 16, 2012 · 6278eb1 · 6278eb1
1 parent 316e733
commit 6278eb1
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/build/check_authorities.pl b/build/check_authorities.pl
@@ -133,6 +133,21 @@
 				}
 			}
 
+			#
+			# Look for reasonable public exponent values.
+			#
+			if (/Exponent: (\d+)/) {
+				$exponent = $1;
+				# print "   exponent: $exponent\n";
+				if (($exponent & 1) == 0) {
+					error("RSA public exponent $exponent is even");
+				} elsif ($exponent <= 3) {
+					error("insecure RSA public exponent $exponent");
+				} elsif ($exponent < 65537) {
+					warning("small RSA public exponent $exponent")
+				}
+			}
+
 		}
 		close SSL;
 		#print "   text lines: $#lines\n";