]> git.ipfire.org Git - thirdparty/openssl.git/commit
EdDSA: disallow verification from a pregenerated hash when in FIPS
authorPauli <ppzgs1@gmail.com>
Tue, 30 Jul 2024 04:11:49 +0000 (14:11 +1000)
committerPauli <ppzgs1@gmail.com>
Wed, 7 Aug 2024 07:12:58 +0000 (17:12 +1000)
commit2d759937e2ee78c27c83f1433f79b33256ab1a39
tree044e94fbd62a92f8fa84aecf72fa970621d76b10
parent889277effb65b7f276e375cf0176c4c8597f4203
EdDSA: disallow verification from a pregenerated hash when in FIPS

Also includes an indicator and the capability to bypass via configuration
or params.

Fixes #24937

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/25032)
providers/implementations/signature/eddsa_sig.c