diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2012-04-18 22:41:50 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2012-04-18 22:41:50 +0000 |
commit | 143619ccf6c46f3909223627eb84b488c271ff5a (patch) | |
tree | 6f4805929c0fedd96da0d22698c273d91bb8aaa9 | |
parent | 9f339d75b59aa6ddc3240f7748dd96b4b01c2186 (diff) |
only call FIPS_cipherinit in FIPS mode
-rw-r--r-- | crypto/evp/evp_enc.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/crypto/evp/evp_enc.c b/crypto/evp/evp_enc.c index 691072655b..8835d9a6ed 100644 --- a/crypto/evp/evp_enc.c +++ b/crypto/evp/evp_enc.c @@ -170,7 +170,8 @@ int EVP_CipherInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher, ENGINE *imp #endif #ifdef OPENSSL_FIPS - return FIPS_cipherinit(ctx, cipher, key, iv, enc); + if (FIPS_mode()) + return FIPS_cipherinit(ctx, cipher, key, iv, enc); #else ctx->cipher=cipher; if (ctx->cipher->ctx_size) @@ -207,7 +208,8 @@ int EVP_CipherInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher, ENGINE *imp skip_to_init: #endif #ifdef OPENSSL_FIPS - return FIPS_cipherinit(ctx, cipher, key, iv, enc); + if (FIPS_mode()) + return FIPS_cipherinit(ctx, cipher, key, iv, enc); #else /* we assume block size is a power of 2 in *cryptUpdate */ OPENSSL_assert(ctx->cipher->block_size == 1 |