diff options
| author | Pauli <pauli@openssl.org> | 2022-10-26 20:09:24 +1100 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2022-11-02 08:41:05 +1100 |
| commit | 7f6bf5cdac7db6e3c0bb03acfaa8ddbeb9b97518 (patch) | |
| tree | 2b91f590810323258053d5bb971b98e96fdf34a6 /providers/fips | |
| parent | dad5676c1a7ad669aac8d83f8ad1d5c4e4d74863 (diff) | |
fips: verify that the RNG was restored after the self tests
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/19486)
Diffstat (limited to 'providers/fips')
| -rw-r--r-- | providers/fips/self_test.c | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/providers/fips/self_test.c b/providers/fips/self_test.c index bcb23344da..2b228da262 100644 --- a/providers/fips/self_test.c +++ b/providers/fips/self_test.c @@ -15,6 +15,7 @@ #include <openssl/fipskey.h> #include <openssl/err.h> #include <openssl/proverr.h> +#include <openssl/rand.h> #include "e_os.h" #include "prov/providercommon.h" @@ -307,6 +308,8 @@ int SELF_TEST_post(SELF_TEST_POST_PARAMS *st, int on_demand_test) unsigned char *indicator_checksum = NULL; int loclstate; OSSL_SELF_TEST *ev = NULL; + EVP_RAND *testrand = NULL; + EVP_RAND_CTX *rng; if (!RUN_ONCE(&fips_self_test_init, do_fips_self_test_init)) return 0; @@ -417,8 +420,19 @@ int SELF_TEST_post(SELF_TEST_POST_PARAMS *st, int on_demand_test) } } + /* Verify that the RNG has been restored properly */ + testrand = EVP_RAND_fetch(st->libctx, "TEST-RAND", NULL); + if (testrand == NULL + || (rng = RAND_get0_private(st->libctx)) == NULL + || strcmp(EVP_RAND_get0_name(EVP_RAND_CTX_get0_rand(rng)), + EVP_RAND_get0_name(testrand)) == 0) { + ERR_raise(ERR_LIB_PROV, PROV_R_SELF_TEST_KAT_FAILURE); + goto end; + } + ok = 1; end: + EVP_RAND_free(testrand); OSSL_SELF_TEST_free(ev); OPENSSL_free(module_checksum); OPENSSL_free(indicator_checksum); |