Pedro Monreal Gonzalez
c941c8db1e
- FIPS: Disable DSA in FIPS mode [bsc#1195385] * Upstream task: https://dev.gnupg.org/T5710 * Add libgcrypt-FIPS-disable-DSA.patch - FIPS: Service level indicator [bsc#1190700] * Provide an indicator to check wether the service utilizes an approved cryptographic algorithm or not. * Add patches: - libgcrypt-FIPS-service-indicators.patch - libgcrypt-FIPS-verify-unsupported-KDF-test.patch - libgcrypt-FIPS-HMAC-short-keylen.patch - FIPS: Define an entropy source SP800-90B compliant [bsc#1185140] * Disable jitter entropy by default in random.conf * Disable only-urandom option by default in random.conf - FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240] * rsa: Check RSA keylen constraints for key operations. * rsa: Fix regression in not returning an error for prime generation. * tests: Add 2k RSA key working in FIPS mode. * tests: pubkey: Replace RSA key to one of 2k. * tests: pkcs1v2: Skip tests with small keys in FIPS. * Add patches: - libgcrypt-FIPS-RSA-keylen.patch - libgcrypt-FIPS-RSA-keylen-tests.patch - FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138] * Add libgcrypt-FIPS-disable-3DES.patch - FIPS: PBKDF requirements [bsc#1185137] OBS-URL: https://build.opensuse.org/request/show/950433 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=153
32 lines
884 B
Diff
32 lines
884 B
Diff
From 70e6cec07d86332f1aaf7a69bec75c7138306f6a Mon Sep 17 00:00:00 2001
|
|
From: NIIBE Yutaka <gniibe@fsij.org>
|
|
Date: Thu, 29 Jul 2021 14:20:14 +0900
|
|
Subject: [PATCH] hwfeatures: Enable hardware support also in FIPS mode.
|
|
|
|
* src/hwfeatures.c (_gcry_detect_hw_features): Remove skipping in FIPS
|
|
mode.
|
|
|
|
--
|
|
|
|
Reported-by: Jakub Jelen <jjelen@redhat.com>
|
|
GnuPG-bug-id: 5508
|
|
Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
|
|
---
|
|
src/hwfeatures.c | 3 ---
|
|
1 file changed, 3 deletions(-)
|
|
|
|
Index: libgcrypt-1.9.4/src/hwfeatures.c
|
|
===================================================================
|
|
--- libgcrypt-1.9.4.orig/src/hwfeatures.c
|
|
+++ libgcrypt-1.9.4/src/hwfeatures.c
|
|
@@ -213,9 +213,6 @@ _gcry_detect_hw_features (void)
|
|
{
|
|
hw_features = 0;
|
|
|
|
- if (fips_mode ())
|
|
- return; /* Hardware support is not to be evaluated. */
|
|
-
|
|
parse_hwf_deny_file ();
|
|
|
|
#if defined (HAVE_CPU_ARCH_X86)
|