diff options
| author | pohsingwu <pohsingwu@synology.com> | 2024-01-28 18:18:02 +0800 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2024-03-01 11:06:03 +0100 |
| commit | fbce6ebf706cdd273f2569edfea7ade106426e0b (patch) | |
| tree | 2d598acb71f57e2fe8af34857e00126020e8cbb6 /doc | |
| parent | c18c301deb44deb27f35c199e8bf44ca8b80e579 (diff) | |
Implement PCT for EDDSA
According to FIPS 140-3 IG 10.3.A Additonal Comment 1, a PCT shall be
performed consistent with the intended use of the keys.
This commit implements PCT for EDDSA via performing sign and verify
operations after key generated.
Also use the same pairwise test logic in EVP_PKEY_keygen and
EVP_PKEY_pairwise_check for EDDSA in FIPS_MODULE.
Add OSSL_SELF_TEST_DESC_PCT_EDDSA to OSSL_PROVIDER-FIPS page.
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23408)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man7/OSSL_PROVIDER-FIPS.pod | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/doc/man7/OSSL_PROVIDER-FIPS.pod b/doc/man7/OSSL_PROVIDER-FIPS.pod index a8ea27cd88..15bc06a710 100644 --- a/doc/man7/OSSL_PROVIDER-FIPS.pod +++ b/doc/man7/OSSL_PROVIDER-FIPS.pod @@ -337,6 +337,8 @@ The FIPS module passes the following descriptions(s) to OSSL_SELF_TEST_onbegin() =item "ECDSA" (B<OSSL_SELF_TEST_DESC_PCT_ECDSA>) +=item "EDDSA" (B<OSSL_SELF_TEST_DESC_PCT_EDDSA>) + =item "DSA" (B<OSSL_SELF_TEST_DESC_PCT_DSA>) Key generation tests used with the "Pairwise_Consistency_Test" type. |