commit 2c242009007a38b5c8003137fb8ba5a1fdb73b70
author Shawn Willden <swillden@google.com> Fri Feb 27 07:01:02 2015 -0700
committer Shawn Willden <swillden@google.com> Wed Mar 11 17:44:50 2015 -0600
tree a2babd7aebb43e29b884956cad559b8faaef1018
parent 5fad785a94716e4b71d51dcf2434ec09ff447b27

Add AuthorizationSetBuilder.

Actually move it from google_keymaster_test, where it was called
ParamBuilder.  This is a generally-useful tool.

Change-Id: I07200cdf2e5628289d9e544af02efe519ca124d3

rsa_operation.cpp

diff --git a/rsa_operation.cpp b/rsa_operation.cpp
index fda2e8b..373ccaa 100644
--- a/rsa_operation.cpp
+++ b/rsa_operation.cpp
@@ -351,7 +351,8 @@
     case KM_PAD_RSA_PSS:
         // OpenSSL doesn't verify that the key is large enough for the digest size.  This can cause
         // a segfault in some cases, and in others can result in a unsafely-small salt.
-        if ((unsigned) RSA_size(rsa_key_) < MIN_PSS_SALT_LEN + digest_size)
+        if ((unsigned)RSA_size(rsa_key_) < MIN_PSS_SALT_LEN + digest_size)
+            // TODO(swillden): Add a better return code for this.
             return KM_ERROR_INCOMPATIBLE_DIGEST;
 
         if ((error = PssPadDigest(&padded_digest)) != KM_ERROR_OK)