diff options
| author | Daiki Ueno <ueno@gnu.org> | 2020-10-05 17:59:46 +0200 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2020-10-06 14:17:32 +0200 |
| commit | 1ff908824a79d8660efaee7593320bfbde104f0e (patch) | |
| tree | 313add805c8bcccd4ff5f0f652795bd6edaa765d | |
| parent | 2aa65c09b407a2fae97fc20668736e5ffed3d29a (diff) | |
| download | gnutls-tmp-kdf-tests.tar.gz | |
fips: run CMAC self-teststmp-kdf-tests
FIPS140-2 IG D.8 mandates self-tests on CMAC.
Signed-off-by: Daiki Ueno <ueno@gnu.org>
| -rw-r--r-- | lib/fips.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/lib/fips.c b/lib/fips.c index 30d396b2c5..51567953df 100644 --- a/lib/fips.c +++ b/lib/fips.c @@ -398,6 +398,12 @@ int _gnutls_fips_perform_self_checks2(void) goto error; } + ret = gnutls_mac_self_test(0, GNUTLS_MAC_AES_CMAC_256); + if (ret < 0) { + gnutls_assert(); + goto error; + } + /* PK */ ret = gnutls_pk_self_test(0, GNUTLS_PK_RSA); if (ret < 0) { |