]> git.ipfire.org Git - thirdparty/openssl.git/commit
kdfs: implement key length check in X9.42
authorDimitri John Ledkov <dimitri.ledkov@surgut.co.uk>
Sat, 21 Sep 2024 14:25:53 +0000 (15:25 +0100)
committerTomas Mraz <tomas@openssl.org>
Mon, 30 Sep 2024 18:04:05 +0000 (20:04 +0200)
commit12d0f0789a3f518581ecada4f3fba899c0b387db
tree8cc4ae71115ef35226d935f7f5e18598e824f1f2
parente1925d2cbabe62c9c6dc75f89d7f8b6fbb8c6b11
kdfs: implement key length check in X9.42

Similar to other KDFs, the input key should be 112 bits long.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25529)

(cherry picked from commit fc68cf21b572bc7fc76a39e4ec150d5d612f02e8)
apps/fipsinstall.c
doc/man1/openssl-fipsinstall.pod.in
doc/man5/fips_config.pod
doc/man7/EVP_KDF-X942-ASN1.pod
providers/fips/include/fips_indicator_params.inc
providers/implementations/kdfs/x942kdf.c
test/recipes/03-test_fipsinstall.t
test/recipes/30-test_evp_data/evpkdf_x942.txt
util/mk-fipsmodule-cnf.pl
util/perl/OpenSSL/paramnames.pm