diff options
| author | Vitezslav Cizek <vcizek@suse.com> | 2015-10-30 15:38:13 +0100 |
|---|---|---|
| committer | Werner Koch <wk@gnupg.org> | 2016-03-18 16:19:06 +0100 |
| commit | c690230af5a66b809f8f6fbab1a6262a5ba078cb (patch) | |
| tree | 54f0767ef1ec226cb7fa55755c81d88cbab11fc3 /tests/basic.c | |
| parent | 78cec8b4754fdf774edb2d575000cb3e972e244c (diff) | |
| download | libgcrypt-c690230af5a66b809f8f6fbab1a6262a5ba078cb.tar.gz | |
tests: Fixes for RSA testsuite in FIPS mode
* tests/basic.c (get_keys_new): Generate 2048 bit key.
* tests/benchmark.c (rsa_bench): Skip keys of lengths different
than 2048 and 3072 in FIPS mode.
* tests/keygen.c (check_rsa_keys): Failure if short keys can be
generated in FIPS mode.
(check_dsa_keys): Ditto for DSA keys.
* tests/pubkey.c (check_x931_derived_key): Skip keys < 2048 in FIPS.
--
Thanks to Ludwig Nussel.
Signed-off-by: Vitezslav Cizek <vcizek@suse.com>
Additional changes by wk:
- Remove printing of "FAIL" in fail() because this is reserved for
use by the test driver of the Makefile.
- Move setting of IN_FIPS_MODE after gcry_check_version in keygen.c
Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'tests/basic.c')
| -rw-r--r-- | tests/basic.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tests/basic.c b/tests/basic.c index 876ee2ec..63fbcf6b 100644 --- a/tests/basic.c +++ b/tests/basic.c @@ -8442,7 +8442,7 @@ get_keys_new (gcry_sexp_t *pkey, gcry_sexp_t *skey) if (verbose) fprintf (stderr, " generating RSA key:"); rc = gcry_sexp_new (&key_spec, - in_fips_mode ? "(genkey (rsa (nbits 4:1024)))" + in_fips_mode ? "(genkey (rsa (nbits 4:2048)))" : "(genkey (rsa (nbits 4:1024)(transient-key)))", 0, 1); if (rc) |