Page MenuHome GnuPG

515_0002-Make-ecdsa-FIPS-186-4-compliant.patch
AbandonedPublic

Authored by civ on Oct 8 2014, 2:16 PM.

Details

Reviewers
None
Summary

From c4389e214e71dd5f28a6b56aebfd9c86f839b437 Mon Sep 17 00:00:00 2001
From: Vitezslav Cizek <vcizek@suse.cz>
Date: Wed, 8 Oct 2014 11:32:04 +0200
Subject: [PATCH 2/4] Make ecdsa FIPS 186-4 compliant.

Disable P-192 (not allowed anymore according to SP 800-131A).
Use SHA2 instead of SHA1 for generation.
Add selftest.

Add ecdsa support to fipsdrv.

cipher/ecc-curves.c | 2 +-
cipher/ecc.c | 163 ++++++++++++++++++++++++++++++-
cipher/pubkey-util.c | 6 +-
src/fips.c | 2 +-
tests/fipsdrv.c | 271 ++++++++++++++++++++++++++++++++++++++++++++++++++-
5 files changed, 434 insertions(+), 10 deletions(-)

2.1.0

Test Plan

Diff Detail

Lint
Lint Skipped
Unit
Unit Tests Skipped