]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8d17cca) | patch
Add fips checks for ecdh key agreement
authorShane Lontis <shane.lontis@oracle.com>
Sat, 29 Aug 2020 02:59:04 +0000 (12:59 +1000)
committerMatt Caswell <matt@openssl.org>
Fri, 18 Sep 2020 13:20:38 +0000 (14:20 +0100)
commit341c3e7f28072e3c3cfb072233aa7d68abc73d0a
tree63996b9f18c1c302ddbe4cae13efdd3641e6b296tree | snapshot
parent8d17cca5b8dc0d93a3a612a47461ee4cabb9fc98commit | diff
Add fips checks for ecdh key agreement

For key agreement only NIST curves that have a security strength of 112 bits or more are allowed.
Fixed tests so they obey these restrictions when testing in fips mode.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12745)
providers/implementations/exchange/ecdh_exch.c diff | blob | blame | history
test/recipes/30-test_evp_data/evppkey_kas.txt diff | blob | blame | history
test/ssl-tests/14-curves.cnf diff | blob | blame | history
test/ssl-tests/14-curves.cnf.in diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git