generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Disable FIPS restrictions when doing GCM testing.

Browse Source
This commit is contained in:
Dr. Stephen Henson 2011-02-10 01:46:25 +00:00
parent b3d8022edd
commit a4113c52b2
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
fips/aes/fips_gcmtest.c
View File

@ -176,6 +176,8 @@ static void gcmtest(int encrypt)
{ {
tag = OPENSSL_malloc(taglen); tag = OPENSSL_malloc(taglen);
EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 1); EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 1);
/* Relax FIPS constraints for testing */
M_EVP_CIPHER_CTX_set_flags(&ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW);
EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0); EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0);
if (encrypt == 1) if (encrypt == 1)
{ {
@ -227,6 +229,8 @@ static void gcmtest(int encrypt)
if (!encrypt && tag) if (!encrypt && tag)
{ {
EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 0); EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 0);
/* Relax FIPS constraints for testing */
M_EVP_CIPHER_CTX_set_flags(&ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW);
EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0); EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0);
EVP_CipherInit_ex(&ctx, NULL, NULL, key, iv, 0); EVP_CipherInit_ex(&ctx, NULL, NULL, key, iv, 0);
EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_TAG, taglen, tag); EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_TAG, taglen, tag);