]> git.ipfire.org Git - thirdparty/openssl.git/commit - crypto/dsa/dsa_pmeth.c
Remove DSA digest length checks when no digest is passed
authorBryan Donlan <bdonlan@amazon.com>
Tue, 17 Jul 2018 20:38:17 +0000 (13:38 -0700)
committerAndy Polyakov <appro@openssl.org>
Sun, 29 Jul 2018 19:26:29 +0000 (21:26 +0200)
commit665d9d1c0655d6f709c99e1211c1e11fcebfeecd
treef0c0999c1170898570d362f5e4dd9412f2612c3e
parentbd93f1ac2750450033dbfa76b5f1597b0145b585
Remove DSA digest length checks when no digest is passed

FIPS 186-4 does not specify a hard requirement on DSA digest lengths,
and in any case the current check rejects the FIPS recommended digest
lengths for key sizes != 1024 bits.

Fixes: #6748
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Andy Polyakov <appro@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6749)
crypto/dsa/dsa_pmeth.c