crypto: dh - implement FIPS PCT and a panic on a failure (!3870) · Merge requests · Red Hat / centos-stream / src / kernel / centos-stream-9

You need to sign in or sign up before continuing.

Vladis Dronov requested to merge NefigTut/centos-stream-9:ffdhe-pct-add into main Mar 16, 2024

JIRA: https://issues.redhat.com/browse/RHEL-25845
Upstream Status: merged into the linux.git

Adjust DH algorithm implementation for FIPS certification
requirements. Add a pair-wise consistency test (PCT) per
SP800-56Arev3, 5.6.2.1.4. Add a panic on a failed test.
Add a boot-time test for the ffdhe2048(dh) template.

Signed-off-by: Vladis Dronov <vdronov@redhat.com>

crypto: dh - implement FIPS PCT and a panic on a failure

Merge request reports