ECDH POST selftest failure inducing support.

diff --git a/fips/ecdh/fips_ecdh_selftest.c b/fips/ecdh/fips_ecdh_selftest.c
index b46ae3b8e3fd2c2d6449b7165edf8c3ef0a4fb05..2b21ceaf4815e973f7f830b917f4f4dd6f0c38fb 100644 (file)
--- a/fips/ecdh/fips_ecdh_selftest.c
+++ b/fips/ecdh/fips_ecdh_selftest.c
@@ -214,6 +214,9 @@ int FIPS_selftest_ecdh(void)
                        goto err;
                        }
 
+               if (!fips_post_corrupt(FIPS_TEST_ECDH, ecd->curve, NULL))
+                       ztmp[0] ^= 0x1;
+
                if (memcmp(ztmp, ecd->z, ecd->zlen))
                        {
                        fips_post_failed(FIPS_TEST_ECDH, ecd->curve, 0);

diff --git a/fips/fips_test_suite.c b/fips/fips_test_suite.c
index c768de75ebb21f46f5e1048fa05474ddfac09549..54a59c3f87bd879a099b6eee4d93c1e249592ff2 100644 (file)
--- a/fips/fips_test_suite.c
+++ b/fips/fips_test_suite.c
@@ -1017,6 +1017,8 @@ int main(int argc,char **argv)
         } else if (!strcmp(argv[1], "dsa")) {
            fail_id = FIPS_TEST_SIGNATURE;
            fail_key = EVP_PKEY_DSA;    
+        } else if (!strcmp(argv[1], "ecdh")) {
+           fail_id = FIPS_TEST_ECDH;
         } else if (!strcmp(argv[1], "ecdsa")) {
            fail_id = FIPS_TEST_SIGNATURE;
            fail_key = EVP_PKEY_EC;