diff options
| author | Daiki Ueno <dueno@redhat.com> | 2019-04-30 14:42:51 +0200 |
|---|---|---|
| committer | Daiki Ueno <dueno@redhat.com> | 2019-05-03 13:59:23 +0200 |
| commit | 1401ff434fffe4420e35d996f08d52ecac41d133 (patch) | |
| tree | b60a9b9de4ea99ce635352cacf4437113913909f /lib/fips.c | |
| parent | d0571e0e934557f5fb0683cd52295b077f2969aa (diff) | |
| download | gnutls-tmp-getiv.tar.gz | |
crypto: add private API to retrieve internal IVtmp-getiv
For FIPS validation purposes, this adds a new function
_gnutls_cipher_get_iv() that exposes internal IV after encryption and
decryption. The function is not generally useful because the IV value
can be easily calculated from the initial IV and the subsequent
ciphertext but for FIPS validation purposes.
Signed-off-by: Daiki Ueno <dueno@redhat.com>
Diffstat (limited to 'lib/fips.c')
| -rw-r--r-- | lib/fips.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/lib/fips.c b/lib/fips.c index ef1f7cbc35..b92edbbd79 100644 --- a/lib/fips.c +++ b/lib/fips.c @@ -329,6 +329,12 @@ int _gnutls_fips_perform_self_checks2(void) goto error; } + ret = gnutls_cipher_self_test(0, GNUTLS_CIPHER_AES_256_CFB8); + if (ret < 0) { + gnutls_assert(); + goto error; + } + /* Digest tests */ ret = gnutls_digest_self_test(0, GNUTLS_DIG_SHA3_224); if (ret < 0) { |