Home GnuPG

fips: Add explicit indicators for md and mac algorithms.
a51f0e66842aUnpublished

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

fips: Add explicit indicators for md and mac algorithms.

* src/fips.c (_gcry_fips_indicator_mac): New function indicating
non-approved mac algorithms.
(_gcry_fips_indicator_md): new functions indicating non-approved
message digest algorithms.
* src/g10lib.h (_gcry_fips_indicator_mac): New function.
(_gcry_fips_indicator_md): Ditto.
* src/gcrypt.h.in (enum gcry_ctl_cmds): New symbols,
GCRYCTL_FIPS_SERVICE_INDICATOR_MAC and
GCRYCTL_FIPS_SERVICE_INDICATOR_MD.
* src/global.c (_gcry_vcontrol): Handle new FIPS indicators.

Cherry-pick master commit of:
c88672a327f6774a66d75a35f25266eec99b16f4

  • GnuPG-bug-id: T6376
  • Signed-off-by: Tobias Heider <tobias.heider@canonical.com>

Details

Provenance
tobheAuthored on Feb 16 2023, 3:20 AM
gniibeCommitted on Mar 8 2023, 2:23 AM
Parents
rC397ff085749e: kdf: Update tests in regards to the allowed parameters in FIPS mode.
Branches
Unknown
Tags
Unknown

Event Timeline