Pedro Monreal Gonzalez
725ec59b57
- Update to 1.10.1:
* Bug fixes:
- Fix minor memory leaks in FIPS mode.
- Build fixes for MUSL libc.
* Other:
- More portable integrity check in FIPS mode.
- Add X9.62 OIDs to sha256 and sha512 modules.
* Add the hardware optimizations config file hwf.deny to
the /etc/gcrypt/ directory. This file can be used to globally
disable the use of hardware based optimizations.
* Remove not needed separate_hmac256_binary hmac256 package
- Update to 1.10.0:
* New and extended interfaces:
- New control codes to check for FIPS 140-3 approved algorithms.
- New control code to switch into non-FIPS mode.
- New cipher modes SIV and GCM-SIV as specified by RFC-5297.
- Extended cipher mode AESWRAP with padding as specified by
RFC-5649.
- New set of KDF functions.
- New KDF modes Argon2 and Balloon.
- New functions for combining hashing and signing/verification.
* Performance:
- Improved support for PowerPC architectures.
- Improved ECC performance on zSeries/s390x by using accelerated
scalar multiplication.
- Many more assembler performance improvements for several
architectures.
* Bug fixes:
- Fix Elgamal encryption for other implementations.
OBS-URL: https://build.opensuse.org/request/show/1038172
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=160
16 lines
396 B
Diff
16 lines
396 B
Diff
Index: libgcrypt-1.10.0/src/fips.c
|
|
===================================================================
|
|
--- libgcrypt-1.10.0.orig/src/fips.c
|
|
+++ libgcrypt-1.10.0/src/fips.c
|
|
@@ -890,6 +890,10 @@ fips_new_state (enum module_states new_s
|
|
|
|
}
|
|
|
|
+ /* Allow a transition to the current state */
|
|
+ if (current_state == new_state)
|
|
+ ok = 1;
|
|
+
|
|
if (ok)
|
|
{
|
|
current_state = new_state;
|