Commit d7dc9a7c authored by Andy Polyakov's avatar Andy Polyakov
Browse files

Platform check in FIPS_mode_set.

parent 319e19db

fips-1.0/fips.c

+10 −0
Original line number Diff line number Diff line
@@ -255,6 +255,16 @@ int FIPS_mode_set(int onoff) 
	    goto end;

	    }



#ifdef OPENSSL_IA32_SSE2

	if ((OPENSSL_ia32cap & (1<<25|1<<26)) != (1<<25|1<<26))

	    {

	    FIPSerr(FIPS_F_FIPS_MODE_SET,FIPS_R_UNSUPPORTED_PLATFORM);

	    fips_selftest_fail = 1;

	    ret = 0;

	    goto end;

	    }

#endif



	if(fips_signature_witness() != FIPS_signature)

	    {

	    FIPSerr(FIPS_F_FIPS_MODE_SET,FIPS_R_CONTRADICTING_EVIDENCE);