Home GnuPG

Remove a way to inactive FIPS mode

Description

Remove a way to inactive FIPS mode

* cipher/md.c (_gcry_md_hash_buffer): Remove inactivation of FIPS mode
  when MD5 is used
  (_gcry_md_hash_buffers_extract): Ditto.
* src/fips.c (gcry_is_fips_mode_inactive): Removed
  (_gcry_inactivate_fips_mode): Removed
  (_gcry_is_fips_mode_inactive): Removed
* src/g10lib.h (_gcry_inactivate_fips_mode): Remove declaration
  (_gcry_is_fips_mode_inactive): Remove declaration
* global.c (_gcry_vcontrol): Update the GCRYCTL_FIPS_MODE_P
  (_gcry_set_allocation_handler): Silently ignore custom alocation
  handlers in FIPS mode
  • Signed-off-by: Jakub Jelen <jjelen@redhat.com>

Details

Provenance
JakujeAuthored on Sep 17 2021, 1:48 PM
wernerCommitted on Sep 20 2021, 8:18 AM
Parents
rCfd116968ef2d: tests: Improve FIPS detection in curves test.
Branches
Unknown
Tags
Unknown