]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
hkdf: remove processing for illegal digest param
authorPauli <paul.dale@oracle.com>
Mon, 27 Oct 2025 02:25:38 +0000 (13:25 +1100)
committerPauli <paul.dale@oracle.com>
Tue, 28 Oct 2025 21:11:51 +0000 (08:11 +1100)
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28997)

providers/implementations/kdfs/hkdf.c

index bb91b966bfb156fae342401b6d52fccaffac101a..b4c84a007a2ba53db589c98664a28a551628ff8e 100644 (file)
@@ -507,12 +507,6 @@ static int kdf_hkdf_fixed_digest_set_ctx_params(void *vctx, const OSSL_PARAM par
     if (ctx == NULL || !hkdf_fixed_digest_set_ctx_params_decoder(params, &p))
         return 0;
 
-    if (p.digest != NULL) {
-        ERR_raise_data(ERR_LIB_PROV, PROV_R_DIGEST_NOT_ALLOWED,
-                       "Setting the digest is not supported for fixed-digest HKDFs");
-        return 0;
-    }
-
     if (!OSSL_FIPS_IND_SET_CTX_FROM_PARAM(ctx, OSSL_FIPS_IND_SETTABLE0, p.ind_k))
         return 0;