Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: bc43158797a7f8bc36cb736524bf812db7d8635e
https://github.com/openssl/openssl/commit/bc43158797a7f8bc36cb736524bf812db7d8635e
Author: slontis <shane.lon...@oracle.com>
Date: 2024-07-26 (Fri, 26 Jul 2024)
Changed paths:
M apps/fipsinstall.c
M doc/man1/openssl-fipsinstall.pod.in
M doc/man3/EVP_EncryptInit.pod
M doc/man7/EVP_CIPHER-DES.pod
M include/openssl/fips_names.h
M providers/common/include/prov/fipscommon.h
M providers/fips/fipsprov.c
M providers/implementations/ciphers/cipher_tdes.h
M providers/implementations/ciphers/cipher_tdes_common.c
M providers/implementations/macs/cmac_prov.c
M test/evp_libctx_test.c
M test/evp_test.c
M test/recipes/30-test_evp_data/evpciph_des3_common.txt
M test/recipes/30-test_evp_data/evpmac_cmac_des.txt
M test/recipes/80-test_cms.t
M util/mk-fipsmodule-cnf.pl
M util/perl/OpenSSL/paramnames.pm
Log Message:
-----------
Add FIPS indicator support for Triple-DES encryption.
This leaves 3DES with the FIPS query "FIPS=yes", which allows
Triple-DES to be used for Decryption by default.
Disallow CMAC using Triple-DES in FIPS.
This does not use a FIPS indicator.
Reviewed-by: Neil Horman <nhor...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/24960)
To unsubscribe from these emails, change your notification settings at
https://github.com/openssl/openssl/settings/notifications
