]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
fips: don't pass MAC parameter to HMAC-DRBG during self-test
authorPauli <paul.dale@oracle.com>
Wed, 29 Oct 2025 02:46:11 +0000 (13:46 +1100)
committerPauli <paul.dale@oracle.com>
Thu, 30 Oct 2025 22:35:18 +0000 (09:35 +1100)
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/29012)

providers/fips/self_test_kats.c

index 539c5f88ca9ed7fc34b12b467dd7a9b1ff94a4fa..dcf43f5df5966bc3847ea14aa094b33eb3389305 100644 (file)
@@ -329,9 +329,6 @@ static int self_test_drbg(const ST_KAT_DRBG *t, OSSL_SELF_TEST *st,
 
     drbg_params[0] = OSSL_PARAM_construct_utf8_string(t->param_name,
                                                       t->param_value, 0);
-    /* This is only used by HMAC-DRBG but it is ignored by the others */
-    drbg_params[1] =
-        OSSL_PARAM_construct_utf8_string(OSSL_DRBG_PARAM_MAC, "HMAC", 0);
     if (!EVP_RAND_CTX_set_params(drbg, drbg_params))
         goto err;