openssl/providers/fips
slontis 85caa417e0 Disable DSA signing in the FIPS provider.
This is a FIPS 140-3 requirement.
This uses a FIP indicator if either the FIPS configurable "dsa_sign_disabled" is set to 0,
OR OSSL_SIGNATURE_PARAM_FIPS_SIGN_CHECK is set to 0 in the dsa signing context.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24799)
2024-07-26 09:24:04 +10:00
..
build.info Add FIPS indicator helpers 2024-07-11 08:29:43 +10:00
fips_entry.c PROV: Relegate most of the FIPS provider code to libfips.a 2021-05-21 12:08:31 +02:00
fipsindicator.c fips: correctly initialise FIPS indicator settables 2024-07-19 17:33:19 +02:00
fipsprov.c Disable DSA signing in the FIPS provider. 2024-07-26 09:24:04 +10:00
self_test_data.inc Disable DSA signing in the FIPS provider. 2024-07-26 09:24:04 +10:00
self_test_kats.c Disable DSA signing in the FIPS provider. 2024-07-26 09:24:04 +10:00
self_test.c fips selftest: avoid relying on a real RNG for self tests 2023-09-27 17:22:54 +01:00
self_test.h Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 2020-10-15 11:59:53 +01:00