Home GnuPG

Properly enforce disablement in other pubkey API

Description

Properly enforce disablement in other pubkey API

* cipher/pubkey.c (_gcry_pk_encrypt): Fail if algo is disabled
  (_gcry_pk_decrypt): Ditto.
  (_gcry_pk_sign): Ditto.
  (_gcry_pk_sign_md): Ditto.
  (_gcry_pk_verify): Ditto.
  (_gcry_pk_verify_md): Ditto.
  (_gcry_pk_testkey): Ditto.
  (_gcry_pk_get_nbits): Ditto.
  (_gcry_pk_get_curve): Ditto.
* tests/basic.c (check_pubkey): Test also other API in FIPS mode to
  verify they fail as expected.
  • GnuPG-bug-id: T5512
  • Signed-off-by: Jakub Jelen <jjelen@redhat.com>

Details

Provenance
JakujeAuthored on Dec 6 2021, 11:49 AM
gniibeCommitted on Dec 7 2021, 3:31 AM
Parents
rCbea8b9672c3c: tests: Add paren for readability.
Branches
Unknown
Tags
Unknown
Tasks
T5512: Implement service indicators