Fix RSA KeyGen CAVP test padding.

Change-Id: I13119c99a7e7542dd66d4c294a1881138c7ab7bd
Reviewed-on: https://boringssl-review.googlesource.com/15925
Reviewed-by: Adam Langley <agl@google.com>

fipsoracle/cavp_rsa2_keygen_test.cc

diff --git a/fipsoracle/cavp_rsa2_keygen_test.cc b/fipsoracle/cavp_rsa2_keygen_test.cc
index e0ce3a1..d831cfb 100644
--- a/fipsoracle/cavp_rsa2_keygen_test.cc
+++ b/fipsoracle/cavp_rsa2_keygen_test.cc
@@ -54,14 +54,14 @@
     RSA_get0_key(key.get(), &n, &e, &d);
     RSA_get0_factors(key.get(), &p, &q);
     std::vector<uint8_t> n_bytes(BN_num_bytes(n)), e_bytes(BN_num_bytes(e)),
-        d_bytes(BN_num_bytes(d)), p_bytes(BN_num_bytes(p)),
+        d_bytes((bits + 7) / 8), p_bytes(BN_num_bytes(p)),
         q_bytes(BN_num_bytes(q));
     if (n == NULL ||
         BN_bn2bin(n, n_bytes.data()) != n_bytes.size() ||
         e == NULL ||
         BN_bn2bin(e, e_bytes.data()) != e_bytes.size() ||
         d == NULL ||
-        BN_bn2bin(d, d_bytes.data()) != d_bytes.size() ||
+        !BN_bn2bin_padded(d_bytes.data(), d_bytes.size(), d) ||
         p == NULL ||
         BN_bn2bin(p, p_bytes.data()) != p_bytes.size() ||
         q == NULL ||