openssl3

Commit Graph

Author	SHA1	Message	Date
Dmitry Belyavskiy	2c5c3fcced	Rebasing to OpenSSL 3.2.1 Resolves: RHEL-26271	9 months ago
Dmitry Belyavskiy	477d91adec	Rebasing to OpenSSL 3.0.7 Resolves: rhbz#2129063	2 years ago
Clemens Lang	08d6c35051	FIPS self-test: RSA-OAEP, FFDHE2048, digest_sign Use RSA-OAEP in FIPS self-tests and support a fixed OAEP seed to make the test deterministic as required for a known-answer test. Switch the signature FIPS self-test to use the digest_sign and digest_verify provider functions using the EVP_DigestSign and EVP_DigestVerify APIs, as the existing signature self-test does not cover hash computation. Switch the existing Diffie-Hellman FIPS self-test to use FFDHE2048, a known safe prime from RFC 7919. Signed-off-by: Clemens Lang <cllang@redhat.com> Resolves: rhbz#2102535	2 years ago

Author

SHA1

Message

Date

Dmitry Belyavskiy

2c5c3fcced

Rebasing to OpenSSL 3.2.1

Resolves: RHEL-26271

Dmitry Belyavskiy

477d91adec

Rebasing to OpenSSL 3.0.7

Resolves: rhbz#2129063

Clemens Lang

08d6c35051

FIPS self-test: RSA-OAEP, FFDHE2048, digest_sign

Use RSA-OAEP in FIPS self-tests and support a fixed OAEP seed to make
the test deterministic as required for a known-answer test.

Switch the signature FIPS self-test to use the digest_sign and
digest_verify provider functions using the EVP_DigestSign and
EVP_DigestVerify APIs, as the existing signature self-test does not
cover hash computation.

Switch the existing Diffie-Hellman FIPS self-test to use FFDHE2048,
a known safe prime from RFC 7919.

Signed-off-by: Clemens Lang <cllang@redhat.com>
Resolves: rhbz#2102535

3 Commits (5768e3c033edc424098309431c764b260184b35a)