[gnutls-devel] GnuTLS | fips: add functions to inspect thread-local FIPS operation state (!1465)

[Read-only notification of GnuTLS library development activities]

Daiki Ueno commented on a discussion on lib/nettle/pk.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1465#note_795078315

>  				  unsigned int flags)
>  {
>  	int ret;
> +	bool not_approved = false;
>  
>  	switch (algo) {
>  	case GNUTLS_PK_DH: {

After second thought, do we still need this check as we restrict the DH primes to >= 2048 bits (i.e., RFC 7919 and RFC 3526 >= 2048)?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1465#note_795078315
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20211225/a5cd9e3c/attachment-0001.html>