Dr. Stephen Henson
5fd722600b
Check for selftest failure in various places.
2011-10-22 17:24:27 +00:00
Dr. Stephen Henson
8d742dd561
Update error codes.
2011-10-21 11:46:16 +00:00
Andy Polyakov
0cde099f86
fips.c: remove preprocessor artefact.
2011-10-21 06:03:45 +00:00
Dr. Stephen Henson
dfe9a47519
fix (?) AVX clearing
2011-10-21 01:57:37 +00:00
Dr. Stephen Henson
af4bfa151c
Check for uninitialised DRBG_CTX and don't free up default DRBG_CTX.
2011-10-21 00:12:53 +00:00
Andy Polyakov
3b5930442d
fips.c: x86[_64] capability masking.
2011-10-20 21:03:09 +00:00
Dr. Stephen Henson
43760a2cf0
Fix error codes.
2011-10-20 13:56:01 +00:00
Andy Polyakov
5f132a0356
fips/fips_[canister|premain].c: make it work with VC6 and add sentinels
...
even to code segments.
2011-10-20 12:09:13 +00:00
Dr. Stephen Henson
4ff2999e88
Add "nopass" for empty password too.
2011-10-19 23:23:35 +00:00
Dr. Stephen Henson
5e4eb9954b
add authentication parameter to FIPS_module_mode_set
2011-10-19 22:34:53 +00:00
Andy Polyakov
552e412abc
fips_canister.c: more cross-compiler platfroms verified.
2011-10-19 21:05:53 +00:00
Dr. Stephen Henson
6d4c65835d
Typo (?)
2011-10-19 12:05:08 +00:00
Dr. Stephen Henson
e3fed9f41e
Update premain fingerprint.
2011-10-18 22:11:11 +00:00
Andy Polyakov
4c3a7a0263
fipssyms.h: assign alias to newly introduced bn_gather5.
2011-10-18 18:59:33 +00:00
Andy Polyakov
10db9f9f48
fips/*: extend fipsro segmenting to all _MSC_VER builds (including WinCE).
2011-10-18 18:56:09 +00:00
Andy Polyakov
9f0d2e1464
fips_enc.c: assign minimal block size to bad_cipher [to avoid arithmetic
...
exceptions in TLS layer].
2011-10-18 18:52:05 +00:00
Andy Polyakov
8fcdb1e60f
Add android-x86.
2011-10-15 08:32:16 +00:00
Dr. Stephen Henson
e1db7c4e7a
Clarify usage message.
2011-10-14 23:51:58 +00:00
Dr. Stephen Henson
41a846c694
Don't use TPREFIX shell variable for minimal script.
2011-10-14 15:15:20 +00:00
Dr. Stephen Henson
3335b6f265
Add usage messages.
2011-10-14 13:00:08 +00:00
Dr. Stephen Henson
5936521495
Print curve type for signature tests.
2011-10-12 22:41:33 +00:00
Dr. Stephen Henson
98bc806749
Skip ECDH sanity check. Add --compare-all to run comparison tests on
...
all files instead of sanity checks.
2011-10-12 17:18:38 +00:00
Dr. Stephen Henson
a2b6dc97f6
Handle partial test where H is absent: needed to check g generation.
2011-10-12 17:03:15 +00:00
Dr. Stephen Henson
e15acd9d9e
Updates to handle some verification of v2 tests.
...
Now enable v2 by default and require a --disable-v2 option to run the
old v1 tests.
2011-10-12 15:33:54 +00:00
Dr. Stephen Henson
a854818ea9
Handle broken test on verify too.
2011-10-12 15:32:57 +00:00
Dr. Stephen Henson
c1f63b5cb3
ECDH POST selftest failure inducing support.
2011-10-12 13:17:19 +00:00
Dr. Stephen Henson
cf61940534
Fix warnings.
2011-10-12 13:06:45 +00:00
Dr. Stephen Henson
dafd5b5d74
Only include one ECDH selftest.
2011-10-12 12:55:58 +00:00
Dr. Stephen Henson
4cc2bbab67
Make fips algorithm test utilities use RESP_EOL for end of line character(s).
...
This should be CRLF even under *nix.
2011-10-01 20:42:52 +00:00
Dr. Stephen Henson
10465aca60
Never echo Num lines for PQGGen DSA2 test.
2011-09-30 11:58:59 +00:00
Dr. Stephen Henson
3f1ebb8f42
make depend
2011-09-29 23:17:59 +00:00
Dr. Stephen Henson
2bfeb7dc83
Add FIPS selftests for ECDH algorithm.
2011-09-29 23:08:23 +00:00
Dr. Stephen Henson
55831cd6ee
Remove s = s * P deferral.
2011-09-29 18:22:37 +00:00
Dr. Stephen Henson
884c33b5c4
Check return codes properly.
2011-09-29 16:24:00 +00:00
Dr. Stephen Henson
54bb3f68e1
Fix output format for DSA2 parameter generation.
2011-09-28 22:35:30 +00:00
Dr. Stephen Henson
a846a7ff32
Add a --disable-all option to disable all tests.
2011-09-25 22:12:39 +00:00
Dr. Stephen Henson
bac3db9cc1
Handle provable prime parameters for canonical g generation which are
...
sometimes erroneously included.
2011-09-25 22:04:43 +00:00
Dr. Stephen Henson
af70f1a35d
Run PQGVer test before DSA2 tests.
2011-09-23 01:03:37 +00:00
Dr. Stephen Henson
ddf00ffab8
Typo.
2011-09-22 14:15:07 +00:00
Dr. Stephen Henson
cb71870dfa
Use function name FIPS_drbg_health_check() for health check function.
...
Add explanatory comments to health check code.
2011-09-22 14:01:25 +00:00
Dr. Stephen Henson
456d883a25
Don't print out errors in cases where errors are expected: testing
...
DSA parameter validity and EC public key validity.
2011-09-21 18:42:12 +00:00
Dr. Stephen Henson
d57cc97f24
Remove unused variable.
2011-09-21 18:36:53 +00:00
Dr. Stephen Henson
05272d4c51
Perform health check on all reseed operations not associated with
...
prediction resistance requests. Although SP 800-90 is arguably unclear
on whether this is necessary adding an additional check has minimal
penalty (very few applications will make an explicit reseed request).
2011-09-21 18:24:12 +00:00
Dr. Stephen Henson
4420b3b17a
Revise DRBG to split between internal and external flags.
...
One demand health check function.
Perform generation test in fips_test_suite.
Option to skip dh test if fips_test_suite.
2011-09-21 17:04:56 +00:00
Dr. Stephen Henson
a5799bdc48
Allow reseed interval to be set.
2011-09-18 19:36:27 +00:00
Dr. Stephen Henson
45fcfcb99f
clarify comment
2011-09-16 17:40:16 +00:00
Dr. Stephen Henson
e248740d67
Minor code tidy and bug fix: need to set t = s after first pass and
...
t and s do not need to have independent values after the first pass
so set t = s.
2011-09-16 17:35:40 +00:00
Dr. Stephen Henson
b889a6046b
Make HMAC kat symbols static.
2011-09-15 14:28:46 +00:00
Dr. Stephen Henson
00b0f2cb3e
Fix warning.
2011-09-15 14:08:24 +00:00
Andy Polyakov
03e389cf04
Allow for dynamic base in Win64 FIPS module.
2011-09-14 20:48:49 +00:00