From dad9b3c9fdbfd654870bb32b241aa978e53b580c4f727ddf33a902897d0e2073 Mon Sep 17 00:00:00 2001 From: Pedro Monreal Gonzalez Date: Wed, 14 Sep 2022 15:37:16 +0000 Subject: [PATCH] Accepting request 1003573 from home:pmonrealgonzalez:branches:security:tls - FIPS: Run the CFB8 cipher selftest without offset [bsc#1203245] * CFB8 list of ciphers: GNUTLS_CIPHER_AES_{128,192,256}_CFB8 * Add gnutls-FIPS-Run-CFB8-without-offset.patch OBS-URL: https://build.opensuse.org/request/show/1003573 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=74 --- gnutls-FIPS-Run-CFB8-without-offset.patch | 29 +++++++++++++++++++++++ gnutls.changes | 7 ++++++ gnutls.spec | 2 ++ 3 files changed, 38 insertions(+) create mode 100644 gnutls-FIPS-Run-CFB8-without-offset.patch diff --git a/gnutls-FIPS-Run-CFB8-without-offset.patch b/gnutls-FIPS-Run-CFB8-without-offset.patch new file mode 100644 index 0000000..4abedb2 --- /dev/null +++ b/gnutls-FIPS-Run-CFB8-without-offset.patch @@ -0,0 +1,29 @@ +Index: gnutls-3.7.7/lib/crypto-selftests.c +=================================================================== +--- gnutls-3.7.7.orig/lib/crypto-selftests.c ++++ gnutls-3.7.7/lib/crypto-selftests.c +@@ -2735,6 +2735,16 @@ int gnutls_cipher_self_test(unsigned fla + NON_FIPS_CASE(GNUTLS_CIPHER_CHACHA20_POLY1305, test_cipher_aead, + chacha_poly1305_vectors); + FALLTHROUGH; ++ CASE(GNUTLS_CIPHER_AES_128_CFB8, test_cipher, ++ aes128_cfb8_vectors); ++ FALLTHROUGH; ++ CASE(GNUTLS_CIPHER_AES_192_CFB8, test_cipher, ++ aes192_cfb8_vectors); ++ FALLTHROUGH; ++ CASE(GNUTLS_CIPHER_AES_256_CFB8, test_cipher, ++ aes256_cfb8_vectors); ++ FALLTHROUGH; ++#if 0 + CASE2(GNUTLS_CIPHER_AES_128_CFB8, test_cipher, + test_cipher_all_block_sizes, + aes128_cfb8_vectors); +@@ -2747,6 +2757,7 @@ int gnutls_cipher_self_test(unsigned fla + test_cipher_all_block_sizes, + aes256_cfb8_vectors); + FALLTHROUGH; ++#endif + CASE(GNUTLS_CIPHER_AES_128_XTS, test_cipher, + aes128_xts_vectors); + FALLTHROUGH; diff --git a/gnutls.changes b/gnutls.changes index 00efdcc..63358e8 100644 --- a/gnutls.changes +++ b/gnutls.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Wed Sep 14 15:25:46 UTC 2022 - Pedro Monreal + +- FIPS: Run the CFB8 cipher selftest without offset [bsc#1203245] + * CFB8 list of ciphers: GNUTLS_CIPHER_AES_{128,192,256}_CFB8 + * Add gnutls-FIPS-Run-CFB8-without-offset.patch + ------------------------------------------------------------------- Tue Sep 13 18:08:03 UTC 2022 - Andreas Stieger diff --git a/gnutls.spec b/gnutls.spec index d5d3271..8f325f2 100644 --- a/gnutls.spec +++ b/gnutls.spec @@ -57,6 +57,8 @@ Patch5: gnutls-FIPS-jitterentropy.patch %endif #PATCH-FIX-SUSE bsc#1190698 FIPS: SLI gnutls_pbkdf2: verify keylengths and allow SHA only Patch6: gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch +#PATCH-FIX-SUSE bsc#1203245 FIPS: Run the CFB8 cipher selftests without offset +Patch7: gnutls-FIPS-Run-CFB8-without-offset.patch BuildRequires: autogen BuildRequires: automake BuildRequires: datefudge