fips: include ML-KEM capabilities in FIPS provider

Co-Authored-By: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26714)

diff --git a/providers/common/capabilities.c b/providers/common/capabilities.c
index 82ea4736f728e9c566862cb0d79f2eb1b3ddb330..f16e90ff0e1f2e2a9778e25c20e55f08fa0c166f 100644 (file)
--- a/providers/common/capabilities.c
+++ b/providers/common/capabilities.c
@@ -215,7 +215,7 @@ static const OSSL_PARAM param_group_list[][11] = {
     TLS_GROUP_ENTRY("ffdhe6144", "ffdhe6144", "DH", 36),
     TLS_GROUP_ENTRY("ffdhe8192", "ffdhe8192", "DH", 37),
 # endif
-# if !defined(OPENSSL_NO_ML_KEM) && !defined(FIPS_MODULE)
+# if !defined(OPENSSL_NO_ML_KEM)
     /* https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-8 */
     TLS_GROUP_ENTRY("MLKEM512", "", "ML-KEM-512", 38),
     TLS_GROUP_ENTRY("MLKEM768", "", "ML-KEM-768", 39),