From 44b8c004a4015fceb44d4f63849866a317892b7d Mon Sep 17 00:00:00 2001 From: Eugene Syromiatnikov Date: Tue, 16 Sep 2025 16:25:33 +0200 Subject: [PATCH] providers/implementations/keymgmt/ecx_kmgmt.c.in: remove PCT on ECX import While PCT on import has been removed for DH, EC, RSA, and SLH-DSA, ECX seems to be overlooked. Correct that omission. Complements: 7f7f75816f26 "import pct: remove import PCTs for most algorithms" Signed-off-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28573) (cherry picked from commit 05d12fdd955d4cb3efc769becc3d5ceb9a322fdc) --- providers/implementations/keymgmt/ecx_kmgmt.c | 8 -------- 1 file changed, 8 deletions(-) diff --git a/providers/implementations/keymgmt/ecx_kmgmt.c b/providers/implementations/keymgmt/ecx_kmgmt.c index e6d326a9070..0ebe8b4d59b 100644 --- a/providers/implementations/keymgmt/ecx_kmgmt.c +++ b/providers/implementations/keymgmt/ecx_kmgmt.c @@ -218,14 +218,6 @@ static int ecx_import(void *keydata, int selection, const OSSL_PARAM params[]) include_private = selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY ? 1 : 0; ok = ok && ossl_ecx_key_fromdata(key, params, include_private); -#ifdef FIPS_MODULE - if (ok > 0 && ecx_key_type_is_ed(key->type) && !ossl_fips_self_testing()) - if (key->haspubkey && key->privkey != NULL) { - ok = ecd_fips140_pairwise_test(key, key->type, 1); - if (ok <= 0) - ossl_set_error_state(OSSL_SELF_TEST_TYPE_PCT_IMPORT); - } -#endif /* FIPS_MODULE */ return ok; } -- 2.47.3