openssl/providers
Dimitri John Ledkov 9d70bba135 fips no-des: compile out TDES KAT
FIPS provider correctly supports no-des build time option and doesn't
advertise DES related algorithms. However KAT test for DES is still
attempted to be executed and fails.

This prevents configuring FIPS provider without legacy behaviour as
defined in SP 800-131Arev2. Also see #25761 internal docs.

Fix `enable-fips no-des` build option, and add a daily checker for
"legacy-free" (as much as currently feasible) FIPS configuration.

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25762)
2024-10-24 15:27:43 +02:00
..
common Add utility function ossl_param_is_empty() 2024-10-09 11:13:46 +02:00
fips fips no-des: compile out TDES KAT 2024-10-24 15:27:43 +02:00
implementations first cut at KEM & key management skeletons 2024-10-21 11:47:16 +01:00
baseprov.c Copyright year updates 2024-09-05 09:35:49 +02:00
build.info first cut at KEM & key management skeletons 2024-10-21 11:47:16 +01:00
decoders.inc Copyright year updates 2023-09-07 09:59:15 +01:00
defltprov.c Copyright year updates 2024-09-05 09:35:49 +02:00
encoders.inc Copyright year updates 2023-09-07 09:59:15 +01:00
fips-sources.checksums make update 2024-09-05 09:37:42 +02:00
fips.checksum make update 2024-09-05 09:37:42 +02:00
fips.module.sources make update 2024-09-05 09:37:42 +02:00
legacyprov.c Copyright year updates 2023-09-07 09:59:15 +01:00
nullprov.c Copyright year updates 2023-09-07 09:59:15 +01:00
prov_running.c
stores.inc Add support for loading root CAs from Windows crypto API 2022-09-14 14:10:18 +01:00