diff options
| author | Daiki Ueno <ueno@gnu.org> | 2020-10-05 17:59:46 +0200 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2020-10-08 17:13:57 +0200 |
| commit | af3df0102fc377591a6de3112b034d4a492fc92c (patch) | |
| tree | 72b7ee9379a33af3d6823811ae4d20e45dea6c45 | |
| parent | d1a3235e8c829855969d00364d8b5456fce2c78c (diff) | |
| download | gnutls-af3df0102fc377591a6de3112b034d4a492fc92c.tar.gz | |
fips: run CMAC self-tests
FIPS140-2 IG D.8 mandates self-tests on CMAC.
Signed-off-by: Daiki Ueno <ueno@gnu.org>
| -rw-r--r-- | lib/fips.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/lib/fips.c b/lib/fips.c index 30d396b2c5..51567953df 100644 --- a/lib/fips.c +++ b/lib/fips.c @@ -398,6 +398,12 @@ int _gnutls_fips_perform_self_checks2(void) goto error; } + ret = gnutls_mac_self_test(0, GNUTLS_MAC_AES_CMAC_256); + if (ret < 0) { + gnutls_assert(); + goto error; + } + /* PK */ ret = gnutls_pk_self_test(0, GNUTLS_PK_RSA); if (ret < 0) { |