hmac drbg: make indicator parameter conditional on FIPS

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28243)
This commit is contained in:
Pauli 2025-08-13 12:59:22 +10:00
parent 4e1eaa17c7
commit fc7a72db24
1 changed files with 2 additions and 2 deletions

View File

@ -384,7 +384,7 @@ static void drbg_hmac_free(void *vdrbg)
['DRBG_PARAM_RESEED_TIME', 'reseed_time', 'time_t'], ['DRBG_PARAM_RESEED_TIME', 'reseed_time', 'time_t'],
['DRBG_PARAM_RESEED_REQUESTS', 'reseed_req', 'uint'], ['DRBG_PARAM_RESEED_REQUESTS', 'reseed_req', 'uint'],
['DRBG_PARAM_RESEED_TIME_INTERVAL', 'reseed_int', 'uint64'], ['DRBG_PARAM_RESEED_TIME_INTERVAL', 'reseed_int', 'uint64'],
['KDF_PARAM_FIPS_APPROVED_INDICATOR', 'ind', 'int'], ['KDF_PARAM_FIPS_APPROVED_INDICATOR', 'ind', 'int', 'fips'],
)); -} )); -}
static int drbg_hmac_get_ctx_params(void *vdrbg, OSSL_PARAM params[]) static int drbg_hmac_get_ctx_params(void *vdrbg, OSSL_PARAM params[])
@ -557,7 +557,7 @@ static int drbg_hmac_set_ctx_params_locked
['PROV_PARAM_CORE_PROV_NAME', 'prov', 'utf8_string'], ['PROV_PARAM_CORE_PROV_NAME', 'prov', 'utf8_string'],
['DRBG_PARAM_RESEED_REQUESTS', 'reseed_req', 'uint'], ['DRBG_PARAM_RESEED_REQUESTS', 'reseed_req', 'uint'],
['DRBG_PARAM_RESEED_TIME_INTERVAL', 'reseed_time', 'uint64'], ['DRBG_PARAM_RESEED_TIME_INTERVAL', 'reseed_time', 'uint64'],
['KDF_PARAM_FIPS_DIGEST_CHECK', 'ind_d', 'int'], ['KDF_PARAM_FIPS_DIGEST_CHECK', 'ind_d', 'int', 'fips'],
)); -} )); -}
static int drbg_hmac_set_ctx_params(void *vctx, const OSSL_PARAM params[]) static int drbg_hmac_set_ctx_params(void *vctx, const OSSL_PARAM params[])