diff --git a/keys.c b/keys.c index 4e1df6a..0fc9d4e 100644 --- a/keys.c +++ b/keys.c @@ -39,6 +39,8 @@ #include "local.h" #include "logging.h" +/* Consider 80 bits as the absolute minimum for a secure key */ +#define MIN_SECURE_KEY_LENGTH 10 typedef struct { uint32_t id; @@ -196,6 +198,9 @@ KEY_Reload(void) continue; } + if (key.len < MIN_SECURE_KEY_LENGTH) + LOG(LOGS_WARN, LOGF_Keys, "Key %"PRIu32" is too short", key_id); + key.id = key_id; key.val = MallocArray(char, key.len); memcpy(key.val, keyval, key.len);