10 Commits (8e5beb77088bfec064d60506b1e76ddb0ac417fe)

Author	SHA1	Message	Date
Clemens Lang	db02879351	FIPS: abort on rsa_keygen_pairwise_test failure ... ISO 19790 AS10.09 says the module shall not perform any cryptographic operations or output data in an error state, but OpenSSL does not have checks for the module state in EVP_DigestUpdate() and EVP_EncryptUpdate(). Upstream and their certification lab says these checks aren't needed, our lab disagrees. We asked for clarification from CMVP. While we are waiting for that, add a change that will allow us to submit. We will drop this patch one we found a solution together with upstream. See #22506 for the discussion upstream. Resolves: RHEL-17104	1 year ago
Dmitry Belyavskiy	72772f737e	Add missing ECDH Public Key Check in FIPS mode ... Resolves: RHEL-15990	1 year ago
Clemens Lang	e5f783d552	Fix Wpointer-sign compiler warning ... ``` providers/implementations/signature/ecdsa_sig.c: scope_hint: In function 'do_ec_pct' providers/implementations/signature/ecdsa_sig.c:594:46: warning[-Wpointer-sign]: pointer targets in passing argument 2 of 'ecdsa_digest_signverify_update' differ in signedness providers/implementations/signature/ecdsa_sig.c:325:69: note: expected 'const unsigned char *' but argument is of type 'const char *' ``` ``` providers/implementations/signature/rsa_sig.c: scope_hint: In function 'do_rsa_pct' providers/implementations/signature/rsa_sig.c:1518:44: warning[-Wpointer-sign]: pointer targets in passing argument 2 of 'rsa_digest_signverify_update' differ in signedness providers/implementations/signature/rsa_sig.c:910:62: note: expected 'const unsigned char *' but argument is of type 'const char *' ``` Resolves: rhbz#2178034 Signed-off-by: Clemens Lang <cllang@redhat.com>	2 years ago
Dmitry Belyavskiy	fb4b72ff2f	DH PCT should abort on failure ... Resolves: rhbz#2178039	2 years ago
Dmitry Belyavskiy	960e6deebf	Abort on PCT failure ... Related: rhbz#2168324	2 years ago
Dmitry Belyavskiy	dd6f0d33c8	Remove previous low-level PCT ... Related: rhbz#2168324	2 years ago
Dmitry Belyavskiy	fa195e46a2	Pairwise consistency tests should use Digest+Sign/Verify ... Resolves: rhbz#2178034	2 years ago
Dmitry Belyavskiy	a0907c129c	Use signature for RSA pairwise test according FIPS-140-3 requirements ... Related: rhbz#2102540	2 years ago
Dmitry Belyavskiy	f1dba9d301	Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements ... Related: rhbz#2102537	2 years ago
Dmitry Belyavskiy	3f7cd79d02	Deal with DH keys in FIPS mode according FIPS-140-3 requirements ... Related: rhbz#2102536	2 years ago