Skip to content

Address feedback for FIPS from lab

Jakub Jelen requested to merge jjelen/libgcrypt-mirror:fips-selftest into master
  • Add function-name based FIPS indicator
  • Run digest&sign self tests for RSA and ECC in FIPS mode (not sure if this is needed though)
  • Run PCT in FIPS mode also with digest step (RSA, ECC)
  • Disable RSA-OAEP in FIPS mode for now as it is complicated to achieve in software modules
  • Use getrandom(GRND_RANDOM) when seeding drbg in FIPS mode to notify the kernel to reseed (this might stay as downstream only as it requires corresponding change in kernel, which is not upstreamed yet)
Edited by Jakub Jelen

Merge request reports