fips140: Perform SHA-3 self tests

It is required to perform the self tests to validate SHA-3
implementation.

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>

diff --git a/lib/fips.c b/lib/fips.c
index d0fb08a0f229d3cf22337dc700e05f8e141734c6..32436ad1f896073fb6c3a3cdd269abaeb5d13987 100644 (file)
--- a/lib/fips.c
+++ b/lib/fips.c
@@ -323,6 +323,31 @@ int _gnutls_fips_perform_self_checks2(void)
                goto error;
        }
 
+       /* Digest tests */
+       ret = gnutls_digest_self_test(0, GNUTLS_DIG_SHA3_224);
+       if (ret < 0) {
+               gnutls_assert();
+               goto error;
+       }
+
+       ret = gnutls_digest_self_test(0, GNUTLS_DIG_SHA3_256);
+       if (ret < 0) {
+               gnutls_assert();
+               goto error;
+       }
+
+       ret = gnutls_digest_self_test(0, GNUTLS_DIG_SHA3_384);
+       if (ret < 0) {
+               gnutls_assert();
+               goto error;
+       }
+
+       ret = gnutls_digest_self_test(0, GNUTLS_DIG_SHA3_512);
+       if (ret < 0) {
+               gnutls_assert();
+               goto error;
+       }
+
        /* MAC (includes message digest test) */
        ret = gnutls_mac_self_test(0, GNUTLS_MAC_SHA1);
        if (ret < 0) {