From 1f66414805bee4faf801e1bd2d221a990f7d25d3 Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Thu, 30 May 2019 13:56:38 +0200
Subject: [PATCH] pki_gcrypt: Do not compare private parts when comparing
 public keys

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
---
 src/pki_gcrypt.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/pki_gcrypt.c b/src/pki_gcrypt.c
index 504acf3a..705830c0 100644
--- a/src/pki_gcrypt.c
+++ b/src/pki_gcrypt.c
@@ -1518,8 +1518,10 @@ int pki_key_compare(const ssh_key k1,
                 return 1;
             }
 
-            if (_bignum_cmp(k1->ecdsa, k2->ecdsa, "d") != 0) {
-                return 1;
+            if (what == SSH_KEY_CMP_PRIVATE) {
+                if (_bignum_cmp(k1->ecdsa, k2->ecdsa, "d") != 0) {
+                    return 1;
+                }
             }
             break;
 #endif