denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

crypto-tester: Explicitly exclude FIPS-PRF from append mode tests

Browse Source 
This was implicitly done by the seed length check before 58dda5d6, but we
now require an explicit check to avoid that unsupported use.
This commit is contained in:
Martin Willi
2015-03-28 08:38:52 +01:00
parent b234fdfce8
commit 9310d4250a
1 changed files with 11 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/crypto/crypto_tester.c
+11 -8
View File
@@ -920,14 +920,17 @@ METHOD(crypto_tester_t, test_prf, bool,
{ {
goto failure; goto failure;
} }
/* do partial append mode and check if key gets set correctly */ if (alg != PRF_FIPS_SHA1_160)
if (!prf->get_bytes(prf, seed, NULL))
{ {
goto failure; /* do partial append mode and check if key gets set correctly */
} if (!prf->get_bytes(prf, seed, NULL))
if (!prf->set_key(prf, key)) {
{ goto failure;
goto failure; }
if (!prf->set_key(prf, key))
{
goto failure;
}
} }
/* allocated bytes */ /* allocated bytes */
if (!prf->allocate_bytes(prf, seed, &out)) if (!prf->allocate_bytes(prf, seed, &out))
@@ -960,7 +963,7 @@ METHOD(crypto_tester_t, test_prf, bool,
goto failure; goto failure;
} }
/* bytes to existing buffer, using append mode */ /* bytes to existing buffer, using append mode */
if (seed.len > 2) if (alg != PRF_FIPS_SHA1_160 && seed.len > 2)
{ {
memset(out.ptr, 0, out.len); memset(out.ptr, 0, out.len);
if (vector->stateful) if (vector->stateful)