crypto: testmgr - disallow certain DRBG hash functions in FIPS mode
authorVladis Dronov <vdronov@redhat.com>
Tue, 17 Jan 2023 17:20:06 +0000 (18:20 +0100)
committerHerbert Xu <herbert@gondor.apana.org.au>
Fri, 27 Jan 2023 10:58:09 +0000 (18:58 +0800)
commit1b4744e107e3d6eeda6473fefee5e2b904b85b8b
tree598e9b712597695e51d8ab3027a971772ca7c448
parentc388f458bc34eb3a5728b67f6614f9375cd99087
crypto: testmgr - disallow certain DRBG hash functions in FIPS mode

According to FIPS 140-3 IG, section D.R "Hash Functions Acceptable for
Use in the SP 800-90A DRBGs", modules certified after May 16th, 2023
must not support the use of: SHA-224, SHA-384, SHA512-224, SHA512-256,
SHA3-224, SHA3-384. Disallow HMAC and HASH DRBGs using SHA-384 in FIPS
mode.

Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Reviewed-by: Stephan Müller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/testmgr.c