[gnutls-devel] GnuTLS | Add support for AES CFB8 cipher (!783)

[Development of GNU's TLS library]

@simo5 Yes, AES-CFB8 is allowed in FIPS 140-2 mode, but you did not mark it so.
Please apply the following patch:
```diff
diff --git a/lib/fips.h b/lib/fips.h
index 7d3f3cfd3960..4e09916ac44e 100644
--- a/lib/fips.h
+++ b/lib/fips.h
@@ -139,6 +139,9 @@ static unsigned is_cipher_algo_forbidden(gnutls_cipher_algorithm_t algo)
                        case GNUTLS_CIPHER_3DES_CBC:
                        case GNUTLS_CIPHER_AES_128_CCM_8:
                        case GNUTLS_CIPHER_AES_256_CCM_8:
+                       case GNUTLS_CIPHER_AES_128_CFB8:
+                       case GNUTLS_CIPHER_AES_192_CFB8:
+                       case GNUTLS_CIPHER_AES_256_CFB8:
                                return 0;
                        default:
                                if (mode == GNUTLS_FIPS140_LAX)
```

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/783#note_111947816
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181025/02f0912f/attachment.html>