openssl

mirror of https://github.com/openssl/openssl.git synced 2026-01-18 17:11:31 +01:00

Files

Dimitri John Ledkov 15d6114d99 hkdf: when HMAC key is all zeros, still set a valid key length

By itself, this is no change in any computation. However, this will
unlock enforcing minimum key lengths for NIST and FIPS 140-3
requirements.

Also reading RFC8448 and RFC5869, this seems to be strictly correct
too.

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@surgut.co.uk>

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24204)

2024-04-25 14:00:05 +02:00

common

Exclude X25519 and X448 from capabilities advertised by FIPS provider

2024-04-19 10:32:27 +02:00

fips

Make X25519 and X448 FIPS unapproved

2024-04-19 10:32:27 +02:00

implementations

hkdf: when HMAC key is all zeros, still set a valid key length

2024-04-25 14:00:05 +02:00

baseprov.c

fips: use seed source requested