From: Pauli <paul.dale@oracle.com>
Date: Mon, 27 Oct 2025 02:25:38 +0000 (+1100)
Subject: hkdf: remove processing for illegal digest param
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5da0a7ba85eb3b522035a02a55c2967105a88d64;p=thirdparty%2Fopenssl.git

hkdf: remove processing for illegal digest param

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28997)
---

diff --git a/providers/implementations/kdfs/hkdf.c b/providers/implementations/kdfs/hkdf.c
index bb91b966bfb..b4c84a007a2 100644
--- a/providers/implementations/kdfs/hkdf.c
+++ b/providers/implementations/kdfs/hkdf.c
@@ -507,12 +507,6 @@ static int kdf_hkdf_fixed_digest_set_ctx_params(void *vctx, const OSSL_PARAM par
     if (ctx == NULL || !hkdf_fixed_digest_set_ctx_params_decoder(params, &p))
         return 0;
 
-    if (p.digest != NULL) {
-        ERR_raise_data(ERR_LIB_PROV, PROV_R_DIGEST_NOT_ALLOWED,
-                       "Setting the digest is not supported for fixed-digest HKDFs");
-        return 0;
-    }
-
     if (!OSSL_FIPS_IND_SET_CTX_FROM_PARAM(ctx, OSSL_FIPS_IND_SETTABLE0, p.ind_k))
         return 0;