[gnutls-devel] GnuTLS | fips: add functions to inspect thread-local FIPS operation state (!1465)

[Read-only notification of GnuTLS library development activities]

Daiki Ueno commented on a discussion on lib/nettle/pk.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1465#note_794989073

>  			mpz_clear(ypowq);
>  
>  			if (ret < 0)
> -				goto fail;
> +				goto cleanup;
>  
>  			break;
>  		}
>  	case GNUTLS_PK_RSA_PSS:
>  	case GNUTLS_PK_RSA:

KeyGen uses a special logic for RSA in FIPS mode, which only [allows](https://gitlab.com/gnutls/gnutls/-/blob/master/lib/nettle/int/rsa-keygen-fips186.c#L432) 2048 and 3072-bit key sizes. So I don't think we need an additional check.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1465#note_794989073
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20211225/3d5ae3c4/attachment.html>