Skip to content

Commit ca94e99

Browse files
author
Herton R. Krzesinski
committed
Merge: crypto: testmgr - disallow certain DRBG hash functions in FIPS mode
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/1968 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2152131 Upstream Status: merged into herbert/cryptodev-2.6.git According to FIPS 140-3 IG, section D.R "Hash Functions Acceptable for Use in the SP 800-90A DRBGs", modules certified after May 16th, 2023 must not support the use of: SHA-224, SHA-384, SHA512-224, SHA512-256, SHA3-224, SHA3-384. Disallow HMAC and HASH DRBGs using SHA-384 in FIPS mode. Signed-off-by: Vladis Dronov <vdronov@redhat.com> Approved-by: Jan Stancek <jstancek@redhat.com> Approved-by: Ondrej Mosnáček <omosnacek@gmail.com> Signed-off-by: Herton R. Krzesinski <herton@redhat.com>
2 parents 527c425 + 64846a2 commit ca94e99

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

crypto/testmgr.c

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4682,7 +4682,6 @@ static const struct alg_test_desc alg_test_descs[] = {
46824682
}, {
46834683
/* covered by drbg_nopr_hmac_sha256 test */
46844684
.alg = "drbg_nopr_hmac_sha384",
4685-
.fips_allowed = 1,
46864685
.test = alg_test_null,
46874686
}, {
46884687
.alg = "drbg_nopr_hmac_sha512",
@@ -4705,7 +4704,6 @@ static const struct alg_test_desc alg_test_descs[] = {
47054704
}, {
47064705
/* covered by drbg_nopr_sha256 test */
47074706
.alg = "drbg_nopr_sha384",
4708-
.fips_allowed = 1,
47094707
.test = alg_test_null,
47104708
}, {
47114709
.alg = "drbg_nopr_sha512",
@@ -4741,7 +4739,6 @@ static const struct alg_test_desc alg_test_descs[] = {
47414739
}, {
47424740
/* covered by drbg_pr_hmac_sha256 test */
47434741
.alg = "drbg_pr_hmac_sha384",
4744-
.fips_allowed = 1,
47454742
.test = alg_test_null,
47464743
}, {
47474744
.alg = "drbg_pr_hmac_sha512",
@@ -4761,7 +4758,6 @@ static const struct alg_test_desc alg_test_descs[] = {
47614758
}, {
47624759
/* covered by drbg_pr_sha256 test */
47634760
.alg = "drbg_pr_sha384",
4764-
.fips_allowed = 1,
47654761
.test = alg_test_null,
47664762
}, {
47674763
.alg = "drbg_pr_sha512",

0 commit comments

Comments
 (0)