]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add FIPS indicator support for Triple-DES encryption.
authorslontis <shane.lontis@oracle.com>
Mon, 22 Jul 2024 07:24:53 +0000 (17:24 +1000)
committerslontis <shane.lontis@oracle.com>
Fri, 26 Jul 2024 04:26:49 +0000 (14:26 +1000)
commitbc43158797a7f8bc36cb736524bf812db7d8635e
tree35d8daed6cecf6c5fd64e6612ee08055222a6117
parent8fe150cce805aa538a8d51d9f9fb932d23db9c90
Add FIPS indicator support for Triple-DES encryption.

This leaves 3DES with the FIPS query "FIPS=yes", which allows
Triple-DES to be used for Decryption by default.

Disallow CMAC using Triple-DES in FIPS.
This does not use a FIPS indicator.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/24960)
17 files changed:
apps/fipsinstall.c
doc/man1/openssl-fipsinstall.pod.in
doc/man3/EVP_EncryptInit.pod
doc/man7/EVP_CIPHER-DES.pod
include/openssl/fips_names.h
providers/common/include/prov/fipscommon.h
providers/fips/fipsprov.c
providers/implementations/ciphers/cipher_tdes.h
providers/implementations/ciphers/cipher_tdes_common.c
providers/implementations/macs/cmac_prov.c
test/evp_libctx_test.c
test/evp_test.c
test/recipes/30-test_evp_data/evpciph_des3_common.txt
test/recipes/30-test_evp_data/evpmac_cmac_des.txt
test/recipes/80-test_cms.t
util/mk-fipsmodule-cnf.pl
util/perl/OpenSSL/paramnames.pm