Home GnuPG

fips,md: Implement new FIPS service indicator for gcry_md_hash_*.

Description

fips,md: Implement new FIPS service indicator for gcry_md_hash_*.

* cipher/md.c (md_enable): Add an NO_REJECT argument.
(md_open): Check flags against GCRY_MD_FLAG_FIPS_NO_REJECTION to
call md_enable.
(_gcry_md_enable): Follow the change.
(_gcry_md_hash_buffer): Don't reject but keep the computation.
Call fips_service_indicator_mark_success.
(_gcry_md_hash_buffers_extract): Likewise.
* src/gcrypt.h.in (GCRY_MD_FLAG_FIPS_NO_REJECTION): New.
* src/visibility.c (gcry_md_hash_buffer, gcry_md_hash_buffers): Call
fips_service_indicator_init.
(gcry_md_hash_buffers_ext): Likewise.
  • GnuPG-bug-id: T7338
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Fri, Dec 6, 6:33 AM
Parents
rC5cfa1aee5b98: fips,kdf: Implement new FIPS service indicator for gcry_kdf_derive.
Branches
Unknown
Tags
Unknown
Tasks
T7338: Revamp the FIPS service indicator