Add missing check in ML-KEM implementation of gcrypt

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
Reviewed-by: Pavol Žáčik <pzacik@redhat.com>
This commit is contained in:
Jakub Jelen
2025-11-28 22:46:22 +01:00
parent b33a90d20b
commit 5a795ce47c

View File

@@ -175,6 +175,11 @@ int ssh_mlkem_decapsulate(const ssh_session session,
return SSH_ERROR; return SSH_ERROR;
} }
if (crypto->mlkem_privkey == NULL) {
SSH_LOG(SSH_LOG_WARNING, "Missing ML-KEM private key in session");
return SSH_ERROR;
}
mlkem_info = kex_type_to_mlkem_info(crypto->kex_type); mlkem_info = kex_type_to_mlkem_info(crypto->kex_type);
if (mlkem_info == NULL) { if (mlkem_info == NULL) {
SSH_LOG(SSH_LOG_WARNING, "Unknown ML-KEM type"); SSH_LOG(SSH_LOG_WARNING, "Unknown ML-KEM type");