openssl/crypto
Dimitri John Ledkov 71ed0fc8b3 pbkdf2: enable setting minimum password length at build time
This is required for FIPS, allow to customize minimum password length,
allow opting in doing the same for the default provider too.

Set FIPS provider default to minimum length of 8, and default provider
to 0. Controlled by -no_pbkdf2_lower_bound_check and indicated with
fips-approved indicator.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/25621)
2025-11-26 08:48:02 +11:00
..
aes
aria
asn1 Remove extra leading '00:' when printing key material with highest byte >= 0x80 2025-11-25 09:09:33 +01:00
async
bf
bio
bn
buffer
camellia
cast
chacha
cmac
cmp
cms
comp
conf
crmf
ct
des
dh
dsa
dso
ec
encode_decode Remove extra leading '00:' when printing key material with highest byte >= 0x80 2025-11-25 09:09:33 +01:00
engine
err pbkdf2: enable setting minimum password length at build time 2025-11-26 08:48:02 +11:00
ess
evp
ffc
hashtable
hmac
hpke
http
idea
kdf
lhash
lms
md2
md4
md5
mdc2
ml_dsa
ml_kem
modes
objects
ocsp
pem
perlasm
pkcs7
pkcs12
poly1305
property
rand
rc2
rc4
rc5
ripemd
rsa
seed
sha
siphash
slh_dsa
sm2
sm3
sm4
srp
stack
store
thread
ts
txt_db
ui
whrlpool
x509
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c
LPdir_win.c
LPdir_win32.c
LPdir_wince.c
README-sparse_array.md
aligned_alloc.c
alphacpuid.pl
arm64cpuid.pl
arm_arch.h
armcap.c
armv4cpuid.pl
array_alloc.c
asn1_dsa.c
bsearch.c
build.info
c64xpluscpuid.pl
comp_methods.c
context.c
core_algorithm.c
core_fetch.c
core_namemap.c
cpt_err.c
cpuid.c
cryptlib.c
ctype.c
cversion.c
defaults.c
der_writer.c
deterministic_nonce.c
dllmain.c
ebcdic.c
ex_data.c
getenv.c
ia64cpuid.S
indicator_core.c
info.c
init.c
initthread.c
loongarch64cpuid.pl
loongarch_arch.h
loongarchcap.c
mem.c
mem_clr.c
mem_sec.c
mips_arch.h
o_dir.c
o_fopen.c
o_init.c
o_str.c
packet.c
param_build.c
param_build_set.c
params.c
params_dup.c
params_from_text.c
pariscid.pl
passphrase.c
ppccap.c
ppccpuid.pl
provider.c
provider_child.c
provider_conf.c
provider_core.c
provider_local.h
provider_predefined.c
punycode.c
quic_vlint.c
rcu_internal.h
riscv32cpuid.pl
riscv64cpuid.pl
riscvcap.c
s390x_arch.h
s390xcap.c
s390xcpuid.pl
self_test_core.c
sleep.c
sparccpuid.S
sparcv9cap.c
sparse_array.c
ssl_err.c
sslerr.h
threads_common.c
threads_lib.c
threads_none.c
threads_pthread.c
threads_win.c
time.c
trace.c
uid.c
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl