kdf,fips: Modify HKDF test for FIPS mode.

* tests/t-kdf.c (check_hkdf): Check if shorter salts are rejected
correctly when FIPS mode.

--

Fixes-commit: fbddfb964f0b1c1ec131194b2273c3f834041c84
Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

1 files changed, 11 insertions, 1 deletions

diff --git a/tests/t-kdf.c b/tests/t-kdf.c
index 508e4bbe..4596c5c7 100644
--- a/tests/t-kdf.c
+++ b/tests/t-kdf.c
@@ -1875,7 +1875,17 @@ check_hkdf (void)
                        info, infolen,
                        expectedlen, out);
   if (err)
-    fail ("HKDF test %d failed: %s\n", count, gpg_strerror (err));
+    {
+      if (in_fips_mode && saltlen < 14)
+        {
+          if (verbose)
+            fprintf (stderr,
+                     "  shorter salt (%lu) rejected correctly in fips mode\n",
+                     saltlen);
+        }
+      else
+        fail ("HKDF test %d failed: %s\n", count, gpg_strerror (err));
+    }
   else if (memcmp (out, expected, expectedlen))
     {
       fail ("HKDF test %d failed: mismatch\n", count);