diff options
| author | Daiki Ueno <dueno@redhat.com> | 2019-08-07 15:55:44 +0200 |
|---|---|---|
| committer | Daiki Ueno <dueno@redhat.com> | 2019-08-08 13:17:00 +0200 |
| commit | 3beaa23ef5852e2d8aaa610aac9cde9b46be4f77 (patch) | |
| tree | a228e4920bde35f5a6f6f7b642d32e6fa75457e4 /lib/nettle/pk.c | |
| parent | 1adee9e136176a8fe26bae036ebb275fe4c26f64 (diff) | |
| download | gnutls-tmp-deterministic-ecdsa.tar.gz | |
nettle: prohibit deterministic ECDSA/DSA under FIPS except selfteststmp-deterministic-ecdsa
Signed-off-by: Daiki Ueno <dueno@redhat.com>
Diffstat (limited to 'lib/nettle/pk.c')
| -rw-r--r-- | lib/nettle/pk.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/lib/nettle/pk.c b/lib/nettle/pk.c index 1f8e7f931f..b2d27cf74a 100644 --- a/lib/nettle/pk.c +++ b/lib/nettle/pk.c @@ -703,6 +703,14 @@ _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo, return gnutls_assert_val(GNUTLS_E_ECC_UNSUPPORTED_CURVE); } + /* deterministic ECDSA/DSA is prohibited under FIPS except in + * the selftests */ + if (_gnutls_fips_mode_enabled() && + _gnutls_get_lib_state() != LIB_STATE_SELFTEST && + (algo == GNUTLS_PK_DSA || algo == GNUTLS_PK_ECDSA) && + (sign_params->flags & GNUTLS_PK_FLAG_REPRODUCIBLE)) + return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST); + switch (algo) { case GNUTLS_PK_EDDSA_ED25519: /* we do EdDSA */ { |