The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA,

as it requires to XOR the key into the hashers state.
A new SHA1 based keyed hash function, implemented as PRF, enables EAP-AKA
and the FIPS-PRF function to properly use the existing SHA1 implementation.

src/charon/plugins/unit_tester/tests/test_fips_prf.c

@@ -45,6 +45,7 @@ bool fips_prf_test()
 	prf = lib->crypto->create_prf(lib->crypto, PRF_FIPS_SHA1_160);
 	if (prf == NULL)
 	{
+		DBG1(DBG_CFG, "FIPS PRF implementation not found");
 		return FALSE;
 	}
 	prf->set_key(prf, key);
@@ -52,6 +53,8 @@ bool fips_prf_test()
 	prf->destroy(prf);
 	if (!chunk_equals(result, expected))
 	{
+		DBG1(DBG_CFG, "FIPS PRF result invalid:\nexpected: %Bresult: %B",
+			 &expected, &result);
 		chunk_free(&result);
 		return FALSE;
 	}