]> git.ipfire.org Git - thirdparty/openssl.git/commit
fips: update DSA security check to fix legacy verify strengths
authorPauli <pauli@openssl.org>
Mon, 12 Jun 2023 23:37:57 +0000 (09:37 +1000)
committerPauli <pauli@openssl.org>
Wed, 14 Jun 2023 23:21:30 +0000 (09:21 +1000)
commit71cf587ea21c1422640847e358019a51806d2811
treeaebc431a73e54da669898ef5799ca5ebc5312f86
parentf3f3f86a14dac76f3079fb50cabd14fdab418bb0
fips: update DSA security check to fix legacy verify strengths

Refer SP 800-131Ar2 table 2:
    https://csrc.nist.gov/publications/detail/sp/800-131a/rev-2/final

Fixes #21185

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21186)
providers/common/securitycheck.c
test/recipes/20-test_cli_fips.t
test/recipes/30-test_evp_data/evppkey_dsa.txt