Commit a4113c52 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Disable FIPS restrictions when doing GCM testing.

parent b3d8022e

fips/aes/fips_gcmtest.c

+4 −0
Original line number Original line Diff line number Diff line
@@ -176,6 +176,8 @@ static void gcmtest(int encrypt) 
			{

			{

			tag = OPENSSL_malloc(taglen);

			tag = OPENSSL_malloc(taglen);

			EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 1);

			EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 1);

			/* Relax FIPS constraints for testing */

			M_EVP_CIPHER_CTX_set_flags(&ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW);

			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0);

			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0);

			if (encrypt == 1)

			if (encrypt == 1)

				{

				{
@@ -227,6 +229,8 @@ static void gcmtest(int encrypt) 
		if (!encrypt && tag)

		if (!encrypt && tag)

			{

			{

			EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 0);

			EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 0);

			/* Relax FIPS constraints for testing */

			M_EVP_CIPHER_CTX_set_flags(&ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW);

			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0);

			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0);

			EVP_CipherInit_ex(&ctx, NULL, NULL, key, iv, 0);

			EVP_CipherInit_ex(&ctx, NULL, NULL, key, iv, 0);

			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_TAG, taglen, tag);

			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_TAG, taglen, tag);