Diffusion libgcrypt 58c92098d053

hmac,hkdf: Allow use of shorter salt for HKDF.
58c92098d053
Actions

Description

hmac,hkdf: Allow use of shorter salt for HKDF.

* cipher/md.c (prepare_macpads): Move the check to...
* src/visibility.c (gcry_mac_setkey): ... here.
* tests/t-kdf.c (check_hkdf): No failure is expected.

GnuPG-bug-id: T6039
Fixes-commit: 76aad97dd312e83f2f9b8d086553f2b72ab6546f
Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance

• gniibe

Authored on Jun 24 2022, 1:59 AM

Parents

rC07722d89bac1: kdf,fips: Modify HKDF test for FIPS mode.

Branches

Unknown

Tags

Unknown

Tasks

T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF

Event Timeline

• gniibe committed rC58c92098d053: hmac,hkdf: Allow use of shorter salt for HKDF. (authored by • gniibe).Jun 24 2022, 1:59 AM

• gniibe added a task: T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF.Jun 24 2022, 2:03 AM

• gniibe mentioned this in rC857e6f467d0f: kdf:pkdf2: Require longer input when FIPS mode..Sep 27 2022, 6:57 AM

• gniibe mentioned this in rCb095ea755973: hmac,hkdf: Check the HMAC key length in FIPS mode..Oct 26 2022, 8:45 AM

Changes (3)

Path

Size

cipher/

md.c

src/

visibility.c

tests/

t-kdf.c

rC58c92098d053

View Options

cipher/md.c

View Options

src/visibility.c

View Options

hmac,hkdf: Allow use of shorter salt for HKDF.58c92098d053Actions

Description

Details

Event Timeline

Changes (3)

rC58c92098d053

cipher/md.c

src/visibility.c

tests/t-kdf.c

hmac,hkdf: Allow use of shorter salt for HKDF.
58c92098d053
Actions