]> git.ipfire.org Git - thirdparty/openssl.git/commit
docs: Simplify FIPS deferred test equivalency
authorSimo Sorce <simo@redhat.com>
Wed, 3 Dec 2025 20:04:28 +0000 (15:04 -0500)
committerDmitry Belyavskiy <beldmit@gmail.com>
Fri, 13 Feb 2026 09:53:40 +0000 (10:53 +0100)
commit32f6ec6de5a3ca75281bf66a947d5890b72df065
tree9595801009604f8ef239c5b3ae987a5e0639c0ca
parent3bf8414dc50f8b32daccaea1636b16d2ca2c1070
docs: Simplify FIPS deferred test equivalency

This commit refines the design for FIPS deferred self-tests by simplifying how
test equivalencies are handled.

The explicit `also_satisfies` list has been removed from the design. Instead
of manually listing which tests are satisfied by another, the new approach
relies on implicit discovery. When a high-level self-test runs, it records all
the underlying cryptographic algorithms that are invoked during its execution.

Upon successful completion of the high-level test, the tests for all recorded
algorithms are automatically marked as passed. This approach is more direct,
less error-prone, and removes the complex logic associated with the previous
explicit dependency lists.

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/29222)
doc/designs/fips_deferred_tests.md