cipher:rsa: Mark/reject SHA1/unknown with RSA signature generation.
* cipher/rsa-common.c (_gcry_rsa_pkcs1_encode_raw_for_sig): We can't determine if it's compliant when raw PKCS1 encoding is used. (_gcry_rsa_pss_encode): Add the behavior of marking non-compliant use. (_gcry_rsa_pss_verify): Likewise. * cipher/rsa.c (rsa_sign): Handle the check for SHA1. (rsa_verify): Likewise. * tests/t-fips-service-ind.c (check_pk_s_v): Add use cases for RSA and Ed25519.
- GnuPG-bug-id: T7338
- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>