From 2db2476824b14ee17f28d0427f8e3b56a5b77a5c Mon Sep 17 00:00:00 2001 From: Matthew Wild Date: Mon, 11 Jul 2022 14:08:55 +0100 Subject: util.paseto: Error early on invalid keys --- util/paseto.lua | 2 ++ 1 file changed, 2 insertions(+) (limited to 'util') diff --git a/util/paseto.lua b/util/paseto.lua index 352c9df0..c658902c 100644 --- a/util/paseto.lua +++ b/util/paseto.lua @@ -106,6 +106,7 @@ end function v4_public.import_public_key(pem) local key = crypto.import_public_pem(pem); + assert(key:get_type() == "ED25519", "Invalid public key type for v4.public"); return setmetatable({ key = key; }, v4_public_pubkey_mt); @@ -113,6 +114,7 @@ end function v4_public.import_private_key(pem) local key = crypto.import_private_pem(pem); + assert(key:get_type() == "ED25519", "Invalid private key type for v4.public"); return setmetatable({ key = key; }, v4_public_privkey_mt); -- cgit v1.2.3