dsa: Add checks in FIPS mode.
* cipher/dsa.c (dsa_check_keysize): New. (generate_fips186): Add call to dsa_check_keysize. (dsa_sign, dsa_verify): Likewise. * tests/benchmark.c (dsa_bench): Skip 1024-bit. * tests/dsa-rfc6979.c (check_dsa_rfc6979): 1024-bit now fails. * tests/fips186-dsa.c (main): Only test check_dsa_gen_186_3 in FIPS mode.
- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>