Update pairwise consistency checks to use SHA-256.

[openssl.git] / crypto / rsa / rsa_gen.c

diff --git a/crypto/rsa/rsa_gen.c b/crypto/rsa/rsa_gen.c
index 90d6b3cd7cf1e5a7f2fad84b110a45e3e3cfd780..7bef5dd6bf207feb38e422b9cdeeb602056dd68f 100644 (file)
--- a/crypto/rsa/rsa_gen.c
+++ b/crypto/rsa/rsa_gen.c
@@ -94,11 +94,11 @@ int fips_check_rsa(RSA *rsa)
 
        /* Perform pairwise consistency signature test */
        if (!fips_pkey_signature_test(&pk, tbs, -1,
 
        /* Perform pairwise consistency signature test */
        if (!fips_pkey_signature_test(&pk, tbs, -1,

-                       NULL, 0, EVP_sha1(), RSA_PKCS1_PADDING, NULL)
+                       NULL, 0, NULL, RSA_PKCS1_PADDING, NULL)

                || !fips_pkey_signature_test(&pk, tbs, -1,
                || !fips_pkey_signature_test(&pk, tbs, -1,

-                       NULL, 0, EVP_sha1(), RSA_X931_PADDING, NULL)
+                       NULL, 0, NULL, RSA_X931_PADDING, NULL)

                || !fips_pkey_signature_test(&pk, tbs, -1,
                || !fips_pkey_signature_test(&pk, tbs, -1,

-                       NULL, 0, EVP_sha1(), RSA_PKCS1_PSS_PADDING, NULL))
+                       NULL, 0, NULL, RSA_PKCS1_PSS_PADDING, NULL))

                goto err;
        /* Now perform pairwise consistency encrypt/decrypt test */
        ctbuf = OPENSSL_malloc(RSA_size(rsa));
                goto err;
        /* Now perform pairwise consistency encrypt/decrypt test */
        ctbuf = OPENSSL_malloc(RSA_size(rsa));