summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorJakub Jelen <jjelen@redhat.com>2022-08-08 13:50:15 +0200
committerNIIBE Yutaka <gniibe@fsij.org>2022-08-23 15:38:17 +0900
commit05a9c9d1ba1db6c1cd160fba979e9ddf4700a0c0 (patch)
treeaf994d0363771bf53953c82cba087ee8b9ed7eb7 /doc
parent1fc7bfc351ba1d7fa31c0c62a24ad78e9e1cfd5b (diff)
downloadlibgcrypt-05a9c9d1ba1db6c1cd160fba979e9ddf4700a0c0.tar.gz
fips: Add function-name based FIPS indicator.
* doc/gcrypt.texi: Document the new function-based fips indicator GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION * src/fips.c (_gcry_fips_indicator_function): New function indicating non-approved functions. * src/gcrypt.h.in (enum gcry_ctl_cmds): New symbol GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION * src/global.c (_gcry_vcontrol): Handle new FIPS indicator. -- Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Diffstat (limited to 'doc')
-rw-r--r--doc/gcrypt.texi7
1 files changed, 7 insertions, 0 deletions
diff --git a/doc/gcrypt.texi b/doc/gcrypt.texi
index f2c1cc94..b608dba2 100644
--- a/doc/gcrypt.texi
+++ b/doc/gcrypt.texi
@@ -995,6 +995,13 @@ certification. If the KDF is approved, this function returns
@code{GPG_ERR_NO_ERROR}. Otherwise @code{GPG_ERR_NOT_SUPPORTED}
is returned.
+@item GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION; Arguments: const char *
+
+Check if the given function is approved under the current FIPS 140-3
+certification. If the function is approved, this function returns
+@code{GPG_ERR_NO_ERROR} (other restrictions might still apply).
+Otherwise @code{GPG_ERR_NOT_SUPPORTED} is returned.
+
@end table
@end deftypefun