Home GnuPG

dsa: Add checks in FIPS mode.

Description

dsa: Add checks in FIPS mode.

* cipher/dsa.c (dsa_check_keysize): New.
(generate_fips186): Add call to dsa_check_keysize.
(dsa_sign, dsa_verify): Likewise.
* tests/benchmark.c (dsa_bench): Skip 1024-bit.
* tests/dsa-rfc6979.c (check_dsa_rfc6979): 1024-bit
now fails.
* tests/fips186-dsa.c (main): Only test check_dsa_gen_186_3 in FIPS
mode.
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Nov 8 2021, 6:47 AM
Parents
rC1f45fec20822: tests: Add 2k RSA key working in FIPS mode.
Branches
Unknown
Tags
Unknown