mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-02-11 14:22:43 +08:00
Code Issues Packages Projects Releases Wiki Activity

Apply the FIPS_eddsa_no_verify_digested indicator on prehash EdDSA only

Browse Source 
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25188)
This commit is contained in:
Tomas Mraz 2024-08-14 17:36:56 +02:00 committed by Neil Horman
parent 096a54ee45
commit ca112fccdd
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
providers/implementations/signature/eddsa_sig.c
View File

@ -383,9 +383,10 @@ static int ed448_digest_sign(void *vpeddsactx, unsigned char *sigret,
static int fips_check_verify(PROV_EDDSA_CTX *ctx)
{
#ifdef FIPS_MODULE
if (!OSSL_FIPS_IND_ON_UNAPPROVED(ctx, OSSL_FIPS_IND_SETTABLE0,
ctx->libctx, "Verify", "EdDSA",
FIPS_eddsa_no_verify_digested))
if (ctx->prehash_flag
&& !OSSL_FIPS_IND_ON_UNAPPROVED(ctx, OSSL_FIPS_IND_SETTABLE0,
ctx->libctx, "Verify", "EdDSA",
FIPS_eddsa_no_verify_digested))
return 0;
#endif /* FIPS_MODULE */
return 1;