[kat/rsa] Remove empty-salt tests from RSA-PSS

andrea-caforio · andreaskurth · commit c0bcca9dcbb0 · 2025-10-27T08:26:20.000Z
Although technically allowed, having a zero-sized salt in RSA-PSS is
strongly discouraged and the cryptolib does not support it. Note that
a zero-sized salt input renders RSA-PSS deterministic.

Signed-off-by: Andrea Caforio &lt;andrea.caforio@lowrisc.org&gt;
diff --git a/sw/device/tests/crypto/cryptotest/BUILD b/sw/device/tests/crypto/cryptotest/BUILD
@@ -147,7 +147,6 @@ RSA_TESTVECTOR_TARGETS = [
 ] + [
     "//sw/host/cryptotest/testvectors/data:wycheproof_rsa_pss_2048_{}.json".format(hash)
     for hash in [
-        "sha256_mgf1_0",
         "sha256_mgf1_32",
         "sha384_mgf1_48",
     ]
diff --git a/sw/host/cryptotest/testvectors/data/BUILD b/sw/host/cryptotest/testvectors/data/BUILD
@@ -649,7 +649,6 @@ WYCHEPROOF_RSA_PKCS1_15_SUFFIXES = {
 
 WYCHEPROOF_RSA_PSS_SUFFIXES = {
     2048: [
-        "sha256_mgf1_0",
         "sha256_mgf1_32",
         "sha384_mgf1_48",
     ],

Original file line number	Diff line number	Diff line change
`@@ -147,7 +147,6 @@ RSA_TESTVECTOR_TARGETS = [`
`147`	`147`	`] + [`
`148`	`148`	`"//sw/host/cryptotest/testvectors/data:wycheproof_rsa_pss_2048_{}.json".format(hash)`
`149`	`149`	`for hash in [`
`150`		`- "sha256_mgf1_0",`
`151`	`150`	`"sha256_mgf1_32",`
`152`	`151`	`"sha384_mgf1_48",`
`153`	`152`	`]`