Diffusion libgcrypt e7b1fbda6a9e

hmac,hkdf: Check the HMAC key length in FIPS mode.
e7b1fbda6a9e
Actions

Tags

None

Subscribers

None

Description

hmac,hkdf: Check the HMAC key length in FIPS mode.

* src/visibility.c (gcry_md_setkey): Add the check here, too.

Cherry-picked from the master commit of:

b095ea7559734f519fbe92d570afe567330eb474

GnuPG-bug-id: T6039
Fixes-commit: 58c92098d053aae7c78cc42bdd7c80c13efc89bb
Signed-off-by: Jakub Jelen <jjelen@redhat.com>

Details

Provenance

Jakuje	Authored on Oct 26 2022, 8:41 AM
• gniibe	Committed on Oct 27 2022, 3:20 AM

Parents

rC7f4fafb5564d: Revert "kdf:pkdf2: Require longer input when FIPS mode."

Branches

Unknown

Tags

Unknown

Tasks

T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF

Event Timeline

• gniibe committed rCe7b1fbda6a9e: hmac,hkdf: Check the HMAC key length in FIPS mode. (authored by Jakuje).Oct 27 2022, 3:20 AM

• gniibe added a task: T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF.Fri, Jan 30, 10:43 AM

Changes (1)

Path

Size

src/

rCe7b1fbda6a9e

src/visibility.c

Loading...