]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add FIPS KMAC key check
authorslontis <shane.lontis@oracle.com>
Mon, 5 Aug 2024 05:25:35 +0000 (15:25 +1000)
committerTomas Mraz <tomas@openssl.org>
Wed, 21 Aug 2024 13:34:58 +0000 (15:34 +0200)
commitea396c7024dec784c76e05d531db41f98788f1e9
treefdc9ecd6dc19ec4d2c8a5d11e96ce1c1c5504b61
parent390f00a1e95f241b4a104c323020c7bc90d5e829
Add FIPS KMAC key check

This adds a FIPS indicator for KMAC key size.
Note that 112 bits keys are still smaller than the
sizes required to reach 128 bits for KMAC128 and
256 bits for KMAC256

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/25049)
13 files changed:
apps/fipsinstall.c
doc/man1/openssl-fipsinstall.pod.in
doc/man7/EVP_MAC-KMAC.pod
doc/man7/provider-mac.pod
include/openssl/fips_names.h
providers/common/include/prov/fipscommon.h
providers/fips/fipsprov.c
providers/implementations/include/prov/implementations.h
providers/implementations/kdfs/hkdf.c
providers/implementations/macs/kmac_prov.c
test/recipes/30-test_evp_data/evpmac_common.txt
util/mk-fipsmodule-cnf.pl
util/perl/OpenSSL/paramnames.pm