diff options
| author | Shane Lontis <shane.lontis@oracle.com> | 2020-03-03 14:02:36 +1000 |
|---|---|---|
| committer | Shane Lontis <shane.lontis@oracle.com> | 2020-03-03 14:02:36 +1000 |
| commit | 47c239c6b8d6e5d66a6ceef3a2c543b6ea338759 (patch) | |
| tree | 67d58074df00d4d53d4e4a6ab50882bc9be56d44 /crypto/dh | |
| parent | 97ace6c2dae451ce8e3b099cf242968ecff128af (diff) | |
Add pairwise consistency self tests to asym keygenerators
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/10952)
Diffstat (limited to 'crypto/dh')
| -rw-r--r-- | crypto/dh/dh_gen.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/crypto/dh/dh_gen.c b/crypto/dh/dh_gen.c index 8e2b773703..f8cda1b7e9 100644 --- a/crypto/dh/dh_gen.c +++ b/crypto/dh/dh_gen.c @@ -1,5 +1,5 @@ /* - * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved. + * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved. * * Licensed under the Apache License 2.0 (the "License"). You may not use * this file except in compliance with the License. You can obtain a copy @@ -15,6 +15,11 @@ /* * DH low level APIs are deprecated for public use, but still ok for * internal use. + * + * NOTE: When generating keys for key-agreement schemes - FIPS 140-2 IG 9.9 + * states that no additional pairwise tests are required (apart from the tests + * specified in SP800-56A) when generating keys. Hence DH pairwise tests are + * omitted here. */ #include "internal/deprecated.h" |