Home GnuPG

Implement explicit FIPS indicators for cipher modes

Description

Implement explicit FIPS indicators for cipher modes

* src/fips.c (_gcry_fips_indicator): New.
* src/g10lib.h (_gcry_fips_indicator): New declaration.
* src/gcrypt.h.in (gcry_ctl_cmds): New GCRYCTL_FIPS_SERVICE_INDICATOR
* src/global.c (_gcry_vcontrol): Handle GCRYCTL_FIPS_SERVICE_INDICATOR
* tests/basic.c (do_check_ocb_cipher): Check excplicit FIPS indicator
  (check_ocb_cipher_largebuf_split): Ditto.
  (check_ocb_cipher_checksum): Ditto.
  (check_ocb_cipher_splitaad): Ditto.
  (check_bulk_cipher_modes): Ditto.

Add GCRYCTL_FIPS_SERVICE_INDICATOR to handle explicit FIPS indicators
for cipher modes.

  • GnuPG-bug-id: T5512
  • Signed-off-by: Jakub Jelen <jjelen@redhat.com>

Details

Provenance
JakujeAuthored on Nov 26 2021, 11:45 AM
gniibeCommitted on Nov 30 2021, 10:52 AM
Parents
rC40ab39966650: fips: Release random resources after selftests.
Branches
Unknown
Tags
Unknown
Tasks
T5512: Implement service indicators