Home GnuPG
Diffusion libgcrypt 857e6f467d0f

kdf:pkdf2: Require longer input when FIPS mode.
857e6f467d0f
Actions

Description

kdf:pkdf2: Require longer input when FIPS mode.

* cipher/kdf.c (_gcry_kdf_pkdf2): Add length check.

Details

Provenance
• gniibeAuthored on Sep 27 2022, 6:26 AM
Parents
rCc20022ffd4ad: fips: Skip PCT if RSA keygen test-parms specified
Branches
Unknown
Tags
Unknown
Reverted By
rC47db7fe3a0c3: Revert "kdf:pkdf2: Require longer input when FIPS mode."
Tasks
T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF

Event Timeline

• gniibe committed rC857e6f467d0f: kdf:pkdf2: Require longer input when FIPS mode. (authored by • gniibe).Sep 27 2022, 6:26 AM
• gniibe added a task: T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF.Sep 27 2022, 6:57 AM
neverpanic added a subscriber: neverpanic.Oct 19 2022, 7:00 PM

This causes ACVP tests to fail, so apparently the assumption that passphrases must be at least 14 bytes was incorrect. ACVP testing tests values larger than 8 bytes. I'll try to clarify whether that's a limit we need to enforce, or just what NIST wants to test. In any case, we will probably have to revert this.

Jakuje mentioned this in T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF.Oct 20 2022, 11:12 AM
• gniibe added a reverting change: rC47db7fe3a0c3: Revert "kdf:pkdf2: Require longer input when FIPS mode.".Oct 26 2022, 8:45 AM

Changes (1)

PathSize
cipher/

rC857e6f467d0f

View Options

cipher/kdf.c

Loading...