tree 8c59efaf62b0408268570b83feeecce27d5d97ad
parent 168fb2e98c2ce82b7653ad62b573b748e2f6298f
author David Benjamin <davidben@google.com> 1507864065 -0400
committer David Benjamin <davidben@google.com> 1507918978 +0000

Test RSA premaster unpad better.

RSABadValueTooLong should have the true one as a suffix, not a prefix,
so that the version check still works. Also do the padding manually to
catch a few other bad padding cases. This is sufficient coverage so that
disabling any one comparison in the padding check flags some failure.

Change-Id: Ibcad284e5ecee3e995f43101c09e4cf7694391e9
Reviewed-on: https://boringssl-review.googlesource.com/21904
Reviewed-by: Steven Valdez <svaldez@google.com>