Home GnuPG

fips,cipher: Implement FIPS service indicator for gcry_pk_hash_ API.

Description

fips,cipher: Implement FIPS service indicator for gcry_pk_hash_ API.

* src/visibility.c (gcry_pk_hash_sign): Initialize the indicator.
(gcry_pk_hash_verify): Likewise.
* tests/t-fips-service-ind.c (check_pk_hash_sign_verify): New.
(main): Call check_pk_hash_sign_verify.
* cipher/ecc-curves.c (_gcry_ecc_fill_in_curve): Don't reject, but
mark non-compliance.
* cipher/pubkey.c (prepare_datasexp_to_be_signed): Likewise.
(_gcry_pk_sign_md, _gcry_pk_verify_md): Likewise.
  • GnuPG-bug-id: T7338
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Wed, Dec 18, 6:18 AM
Parents
rC60db2a175d12: fips,md: gcry_md_copy should care about FIPS service indicator.
Branches
Unknown
Tags
Unknown
Tasks
T7338: Revamp the FIPS service indicator