tests: Fixes for RSA testsuite in FIPS mode
c690230af5a6Unpublished
Actions

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

tests: Fixes for RSA testsuite in FIPS mode

* tests/basic.c (get_keys_new): Generate 2048 bit key.
* tests/benchmark.c (rsa_bench): Skip keys of lengths different
than 2048 and 3072 in FIPS mode.
* tests/keygen.c (check_rsa_keys): Failure if short keys can be
generated in FIPS mode.
(check_dsa_keys): Ditto for DSA keys.
* tests/pubkey.c (check_x931_derived_key): Skip keys < 2048 in FIPS.

Thanks to Ludwig Nussel.

Additional changes by wk:

Remove printing of "FAIL" in fail() because this is reserved for use by the test driver of the Makefile.
Move setting of IN_FIPS_MODE after gcry_check_version in keygen.c