FIPS140-2 mode: test whether RSA encrypted data differ from plaintext

1 files changed, 7 insertions, 0 deletions

diff --git a/lib/crypto-selftests-pk.c b/lib/crypto-selftests-pk.c
index 69633098c6..519d70beaa 100644
--- a/lib/crypto-selftests-pk.c
+++ b/lib/crypto-selftests-pk.c
@@ -109,6 +109,13 @@ static int test_rsa_enc(gnutls_pk_algorithm_t pk,
 		goto cleanup;
 	}
 
+	if (enc.size == signed_data.size && memcmp(signed_data.data, enc.data,
+		enc.size) == 0) {
+		gnutls_assert();
+		ret = GNUTLS_E_SELF_TEST_ERROR;
+		goto cleanup;
+	}
+
 	ret = gnutls_privkey_decrypt_data(key, 0, &enc, &dec);
 	if (ret < 0) {
 		gnutls_assert();