Home GnuPG

pkdf2: Add checks for FIPS.

Description

pkdf2: Add checks for FIPS.

* cipher/kdf.c (_gcry_kdf_pkdf2): Require 8 chars passphrase for FIPS.
Set bounds for salt length and iteration count in FIPS mode.
  • GnuPG-bug-id: T6039
  • Signed-off-by: Jakub Jelen <jjelen@redhat.com>

Details

Provenance
JakujeAuthored on Nov 18 2022, 1:49 AM
gniibeCommitted on Nov 18 2022, 2:01 AM
Parents
rC1ce5fce7e4de: doc: Update document for pkg-config and libgcrypt.m4.
Branches
Unknown
Tags
Unknown
Tasks
T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF