From a4113c52b227182627c1a102ff70245d210cb669 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Thu, 10 Feb 2011 01:46:25 +0000 Subject: [PATCH] Disable FIPS restrictions when doing GCM testing. --- fips/aes/fips_gcmtest.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/fips/aes/fips_gcmtest.c b/fips/aes/fips_gcmtest.c index 32bbf3b321..e7bcad0dca 100644 --- a/fips/aes/fips_gcmtest.c +++ b/fips/aes/fips_gcmtest.c @@ -176,6 +176,8 @@ static void gcmtest(int encrypt) { tag = OPENSSL_malloc(taglen); EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 1); + /* Relax FIPS constraints for testing */ + M_EVP_CIPHER_CTX_set_flags(&ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW); EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0); if (encrypt == 1) { @@ -227,6 +229,8 @@ static void gcmtest(int encrypt) if (!encrypt && tag) { EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 0); + /* Relax FIPS constraints for testing */ + M_EVP_CIPHER_CTX_set_flags(&ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW); EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0); EVP_CipherInit_ex(&ctx, NULL, NULL, key, iv, 0); EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_TAG, taglen, tag); -- 2.25.1