Home GnuPG

fips: Use flags.fips to check algo availability.

Description

fips: Use flags.fips to check algo availability.

* cipher/cipher.c (check_cipher_algo): Check ->flags.fips.
(_gcry_cipher_open_internal, _gcry_cipher_selftest): Likewise.
(_gcry_cipher_init): Don't modify ->flags.disabled.
* cipher/mac.c (_gcry_mac_init): Don't modify ->flags.disabled.
(check_mac_algo): Check ->flags.fips.
(mac_open, _gcry_mac_selftest): Likewise.
* cipher/md.c (check_digest_algo): Check ->flags.fips.
(md_enable, _gcry_md_hash_buffer): Likewise.
(_gcry_md_hash_buffers_extract, _gcry_md_selftest): Likewise.
(_gcry_md_init): Don't modify ->flags.disabled.
  • GnuPG-bug-id: T5747
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Jan 4 2022, 5:58 AM
Parents
rCc49ff1f46436: doc: Fix previous commit.
Branches
Unknown
Tags
Unknown
Tasks
T5747: Provide a way to request non-FIPS service in FIPS mode