Pedro Monreal Gonzalez
dea0435690
- Update to 1.9.1
* *Fix exploitable bug* in hash functions introduced with
1.9.0. [bsc#1181632, CVE-2021-3345]
* Return an error if a negative MPI is used with sexp scan
functions.
* Check for operational FIPS in the random and KDF functions.
* Fix compile error on ARMv7 with NEON disabled.
* Fix self-test in KDF module.
* Improve assembler checks for better LTO support.
* Fix 32-bit cross build on x86.
* Fix non-NEON ARM assembly implementation for SHA512.
* Fix build problems with the cipher_bulk_ops_t typedef.
* Fix Ed25519 private key handling for preceding ZEROs.
* Fix overflow in modular inverse implementation.
* Fix register access for AVX/AVX2 implementations of Blake2.
* Add optimized cipher and hash functions for s390x/zSeries.
* Use hardware bit counting functionx when available.
* Update DSA functions to match FIPS 186-3.
* New self-tests for CMACs and KDFs.
* Add bulk cipher functions for OFB and GCM modes.
- Update libgpg-error required version
- Use the suffix variable correctly in get_hmac_path()
- Rebase libgcrypt-fips_selftest_trigger_file.patch
- Add the global config file /etc/gcrypt/random.conf
* This file can be used to globally change parameters of the random
generator with the options: only-urandom and disable-jent.
- Update to 1.9.0:
OBS-URL: https://build.opensuse.org/request/show/868925
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=142
41 lines
1.1 KiB
Diff
41 lines
1.1 KiB
Diff
Index: libgcrypt-1.9.1/src/fips.c
|
|
===================================================================
|
|
--- libgcrypt-1.9.1.orig/src/fips.c
|
|
+++ libgcrypt-1.9.1/src/fips.c
|
|
@@ -660,7 +660,7 @@ get_library_path(const char *libname, co
|
|
#endif
|
|
|
|
static gpg_error_t
|
|
-get_hmac_path(char **fname)
|
|
+get_hmac_path(char **fname, char *suffix)
|
|
{
|
|
char libpath[4096];
|
|
gpg_error_t err;
|
|
@@ -685,7 +685,7 @@ get_hmac_path(char **fname)
|
|
p = *fname;
|
|
memmove (p+1, p, strlen (p)+1);
|
|
*p = '.';
|
|
- strcat (*fname, ".hmac");
|
|
+ strcat (*fname, suffix);
|
|
err = 0;
|
|
}
|
|
}
|
|
@@ -717,7 +717,7 @@ check_binary_integrity (void)
|
|
else
|
|
{
|
|
FILE *fp;
|
|
- err = get_hmac_path(&fname);
|
|
+ err = get_hmac_path(&fname, ".hmac");
|
|
if (!err)
|
|
{
|
|
/* Open the file. */
|
|
@@ -779,7 +779,7 @@ can_skip_selftests(void)
|
|
if (fips_mode())
|
|
return 0;
|
|
|
|
- if (get_hmac_path(&fname))
|
|
+ if (get_hmac_path(&fname, ".fips"))
|
|
return 0;
|
|
|
|
/* check the hmac presence */
|