)]}'
{
  "commit": "db10ae50361a05508683282fcd8d2344a6a1517c",
  "tree": "1062757a50e405e886d0600d6fa6c6ca13c3faf6",
  "parents": [
    "de434576d7412b95a8eb90d613fc9f01e2d7166b"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Sat Nov 19 01:17:49 2022 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue Nov 29 01:13:51 2022 +0000"
  },
  "message": "Cap Montgomery moduli to 8 KiB.\n\nWe have two places where the current cap on BIGNUM sizes (64 MiB) is too\nlarge, both involving Montgomery reduction: bn_mul_mont allocates a\nspare value on the stack, and BN_mod_exp_mont_constime needs to allocate\na buffer of up to 64 contiguous values, which may overflow an int.\n\nMake BN_MONT_CTX reject any BIGNUM larger than 8 KiB. This is 65,536\nbits which is well above our maximum RSA key size, 16,384 bits. Ideally\nwe\u0027d just apply this in bn_wexpand, to all BIGNUMs across the board, but\nwe found one caller that depends on creating an 8 MiB BIGNUM.\n\nUpdate-Note: This will not affect any cryptography implemented by\nBoringSSL, such as RSA, but other callers may run into this limit. If\nnecessary, we can raise this a bit, but the stack allocation means we\ndon\u0027t want to go *significantly* beyond what\u0027s in this CL.\n\nFixed: 541\nChange-Id: Ia00f3ea6714a5042434f446943db55a533752dc5\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/55266\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4e35645c313774c36e887927e9eaa39a3729bc2e",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/bn/bn_test.cc",
      "new_id": "9d9e1d368a97fe2d2acd192c544641cdee601ece",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/bn/bn_test.cc"
    },
    {
      "type": "modify",
      "old_id": "afa8e71020b96c79c19880f77acdddeba32ad11e",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/bn/exponentiation.c",
      "new_id": "859cf65b83b4abdaedb0235800e368722b34b846",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/bn/exponentiation.c"
    },
    {
      "type": "modify",
      "old_id": "f7adfe92ed939f39ef4202b2e1d5b406e6fd9e4c",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/bn/internal.h",
      "new_id": "85009a925a3954edaf4520339e16747cee15e551",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/bn/internal.h"
    },
    {
      "type": "modify",
      "old_id": "d04e91a13cdf4e19347423a8d1201b95a72f0507",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/bn/montgomery.c",
      "new_id": "92bfa5e327143837649aabc336149ad4ff6d14e1",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/bn/montgomery.c"
    }
  ]
}