Remove AES SIV ciphers from the FIPS provider
authorPauli <pauli@openssl.org>
Mon, 27 Feb 2023 08:20:53 +0000 (19:20 +1100)
committerPauli <pauli@openssl.org>
Wed, 1 Mar 2023 07:35:01 +0000 (18:35 +1100)
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/20386)

providers/fips/fipsprov.c
providers/implementations/ciphers/build.info

index b86b27d236f3b937d3849295d92a9d30f24cd85b..ab58ab891d94feff5838cb8a2bd76e511b249248 100644 (file)
@@ -297,11 +297,6 @@ static const OSSL_ALGORITHM_CAPABLE fips_ciphers[] = {
     ALG(PROV_NAMES_AES_128_CTR, ossl_aes128ctr_functions),
     ALG(PROV_NAMES_AES_256_XTS, ossl_aes256xts_functions),
     ALG(PROV_NAMES_AES_128_XTS, ossl_aes128xts_functions),
-#ifndef OPENSSL_NO_SIV
-    ALG(PROV_NAMES_AES_128_GCM_SIV, ossl_aes128gcm_siv_functions),
-    ALG(PROV_NAMES_AES_192_GCM_SIV, ossl_aes192gcm_siv_functions),
-    ALG(PROV_NAMES_AES_256_GCM_SIV, ossl_aes256gcm_siv_functions),
-#endif /* OPENSSL_NO_SIV */
     ALG(PROV_NAMES_AES_256_GCM, ossl_aes256gcm_functions),
     ALG(PROV_NAMES_AES_192_GCM, ossl_aes192gcm_functions),
     ALG(PROV_NAMES_AES_128_GCM, ossl_aes128gcm_functions),
index dfd476304d4497bcd0b99eed8929d2973ac6f66e..5eb705969f54e4586bf197608987e7841bb08c9a 100644 (file)
@@ -25,7 +25,7 @@ $SM4_GOAL=../../libdefault.a
 $CHACHA_GOAL=../../libdefault.a
 $CHACHAPOLY_GOAL=../../libdefault.a
 $SIV_GOAL=../../libdefault.a
-$SIV_GCM_GOAL=../../libdefault.a ../../libfips.a
+$SIV_GCM_GOAL=../../libdefault.a
 
 IF[{- !$disabled{asm} -}]
   $GHASHDEF_x86=GHASH_ASM