diff options
| author | Daiki Ueno <dueno@redhat.com> | 2019-08-05 15:21:55 +0200 |
|---|---|---|
| committer | Daiki Ueno <dueno@redhat.com> | 2019-08-08 13:14:56 +0200 |
| commit | 1adee9e136176a8fe26bae036ebb275fe4c26f64 (patch) | |
| tree | 8df108d92b3e95498e41281ae6b1f313c320c216 | |
| parent | 8eb3a29336ea11f6b417ce7e25d53513509bdd87 (diff) | |
| download | gnutls-1adee9e136176a8fe26bae036ebb275fe4c26f64.tar.gz | |
nettle: enable deterministic ECDSA/DSA during FIPS selftests
Signed-off-by: Daiki Ueno <dueno@redhat.com>
| -rw-r--r-- | lib/nettle/pk.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/lib/nettle/pk.c b/lib/nettle/pk.c index ebd6481cf7..1f8e7f931f 100644 --- a/lib/nettle/pk.c +++ b/lib/nettle/pk.c @@ -820,7 +820,8 @@ _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo, } mpz_init(k); - if (sign_params->flags & GNUTLS_PK_FLAG_REPRODUCIBLE) { + if (_gnutls_get_lib_state() == LIB_STATE_SELFTEST || + (sign_params->flags & GNUTLS_PK_FLAG_REPRODUCIBLE)) { ret = _gnutls_ecdsa_compute_k(k, curve_id, pk_params->params[ECC_K], @@ -888,7 +889,8 @@ _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo, } mpz_init(k); - if (sign_params->flags & GNUTLS_PK_FLAG_REPRODUCIBLE) { + if (_gnutls_get_lib_state() == LIB_STATE_SELFTEST || + (sign_params->flags & GNUTLS_PK_FLAG_REPRODUCIBLE)) { ret = _gnutls_dsa_compute_k(k, pub.q, TOMPZ(priv), |