add size check (lestrrat-go#950)

Signed-off-by: AdamKorcz <[email protected]>
ItalyPaleAle · Jun 30, 2023 · 8149455 · 8149455
1 parent 246dde8
commit 8149455
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/jwk/okp.go b/jwk/okp.go
@@ -86,6 +86,9 @@ func buildOKPPrivateKey(alg jwa.EllipticCurveAlgorithm, xbuf []byte, dbuf []byte
 	}
 	switch alg {
 	case jwa.Ed25519:
+		if len(dbuf) != ed25519.SeedSize {
+			return nil, fmt.Errorf(`wrong private key size`)
+		}
 		ret := ed25519.NewKeyFromSeed(dbuf)
 		//nolint:forcetypeassert
 		if !bytes.Equal(xbuf, ret.Public().(ed25519.PublicKey)) {