Home GnuPG

cipher:md: Check digest algo is supported when FIPS enabled.

Description

cipher:md: Check digest algo is supported when FIPS enabled.

* cipher/md.c (_gcry_md_hash_buffer): Check for FIPS for
hash_buffers method case.
(_gcry_md_hash_buffers_extract): Likewise.

For digest implementation with ->hash_buffers, there was no check.

  • GnuPG-bug-id: T5665
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Nov 1 2021, 6:55 AM
Parents
rC34d55589b7d9: mpi: Allow opaque MPI with zero length.
Branches
Unknown
Tags
Unknown
Tasks
T5665: libgcrypt : Restrict message digest use for FIPS 140-3