BruebachL b37c8b828f [Utility] Budget scrypt's XY array in the derivation memory limit (#7712) ... deriveKey passes maxmem = 128nr + 128rp + 4096 to EVP_PBE_scrypt, but scrypt also allocates XY at 256r bytes. costParamsAreSane accepts r up to 32, so any server asking for r >= 17 made derivation fail and the client report a login abort it could never recover from. Cover the XY array and add a regression test at the accepted-range boundary. Co-authored-by: Lukas Brübach <Bruebach.Lukas@bdosecurity.de>		2026-11-02 07:29:15 +01:00
..
utility	[Utility] Budget scrypt's XY array in the derivation memory limit (#7712)	2026-11-02 07:29:15 +01:00