0acda1a0
by Sreehari Anil at 2026-03-02T15:45:01+01:00
bcrypt: Improve RSA OAEP parameter handling.
Handle OAEP parameter setup failures when setting SPKI parameters and
propagate GNUTLS_E_UNKNOWN_PK_ALGORITHM as STATUS_NOT_SUPPORTED.
For OAEP encrypt/decrypt, accept empty labels by only setting OAEP SPKI
parameters when a non-empty label is provided.
Match native Windows OAEP(NULL) behavior for encryption by allowing
size-only queries and returning STATUS_INVALID_PARAMETER for actual
encryption when pPaddingInfo is NULL.
Add tests covering OAEP empty-label roundtrip and OAEP(NULL) size-query
vs. encrypt behavior.
Signed-off-by: Sreehari Anil <sreehari7102008@gmail.com>