provider: add TLS13_KDF to the default and FIPS providers
authorPauli <pauli@openssl.org>
Mon, 2 Aug 2021 06:19:29 +0000 (16:19 +1000)
committerPauli <pauli@openssl.org>
Thu, 5 Aug 2021 05:43:59 +0000 (15:43 +1000)
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/16203)

providers/defltprov.c
providers/fips/fipsprov.c

index cb8a90f1cd55eec3b0c7108606ce0a3cc7d1e8f4..498c4eaa2a251105973f8c8cc3ead4d2402b0b48 100644 (file)
@@ -320,6 +320,8 @@ static const OSSL_ALGORITHM deflt_macs[] = {
 
 static const OSSL_ALGORITHM deflt_kdfs[] = {
     { PROV_NAMES_HKDF, "provider=default", ossl_kdf_hkdf_functions },
+    { PROV_NAMES_TLS1_3_KDF, "provider=default",
+      ossl_kdf_tls1_3_kdf_functions },
     { PROV_NAMES_SSKDF, "provider=default", ossl_kdf_sskdf_functions },
     { PROV_NAMES_PBKDF2, "provider=default", ossl_kdf_pbkdf2_functions },
     { PROV_NAMES_PKCS12KDF, "provider=default", ossl_kdf_pkcs12_functions },
index b69299e04665b98accf83ff2d9167b2df093dc20..f4605dcd6ce5f44a65ba6e04c158ff73d7aa29b7 100644 (file)
@@ -346,6 +346,8 @@ static const OSSL_ALGORITHM fips_macs[] = {
 
 static const OSSL_ALGORITHM fips_kdfs[] = {
     { PROV_NAMES_HKDF, FIPS_DEFAULT_PROPERTIES, ossl_kdf_hkdf_functions },
+    { PROV_NAMES_TLS1_3_KDF, FIPS_DEFAULT_PROPERTIES,
+      ossl_kdf_tls1_3_kdf_functions },
     { PROV_NAMES_SSKDF, FIPS_DEFAULT_PROPERTIES, ossl_kdf_sskdf_functions },
     { PROV_NAMES_PBKDF2, FIPS_DEFAULT_PROPERTIES, ossl_kdf_pbkdf2_functions },
     { PROV_NAMES_SSHKDF, FIPS_DEFAULT_PROPERTIES, ossl_kdf_sshkdf_functions },