From 786a77131bb366eb2fd3c17fd7560fc991fcccc6 Mon Sep 17 00:00:00 2001
From: AdamKorcz <adam@adalogics.com>
Date: Thu, 29 Jun 2023 22:26:05 +0100
Subject: [PATCH] add size check

Signed-off-by: AdamKorcz <adam@adalogics.com>
---
 jwk/okp.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/jwk/okp.go b/jwk/okp.go
index 2bf790124..9c01ec165 100644
--- a/jwk/okp.go
+++ b/jwk/okp.go
@@ -86,6 +86,9 @@ func buildOKPPrivateKey(alg jwa.EllipticCurveAlgorithm, xbuf []byte, dbuf []byte
 	}
 	switch alg {
 	case jwa.Ed25519:
+		if len(dbuf) != ed25519.SeedSize {
+			return nil, fmt.Errorf(`wrong private key size`)
+		}
 		ret := ed25519.NewKeyFromSeed(dbuf)
 		//nolint:forcetypeassert
 		if !bytes.Equal(xbuf, ret.Public().(ed25519.PublicKey)) {