| commit | fc23300164d6e36599c1ffe4bd50e878826fcdec | [log] [tgz] |
|---|---|---|
| author | Adam Langley <alangley@gmail.com> | Tue Feb 09 13:39:28 2021 -0800 |
| committer | Adam Langley <alangley@gmail.com> | Tue Feb 09 22:57:26 2021 +0000 |
| tree | 46333ff062994ab061571ac3efa9ece0a4930565 | |
| parent | 4d3e540cc05846eba5dfa6305e742133ea08fe0d [diff] [blame] |
acvp: don't include CMAC-AES in regcap dump. CMAC-AES isn't inside our FIPS module, it's only included in modulewrapper in order to test acvptool. Mark it with a special tag to avoid it appearing when dumping regcap JSON because NIST paperwork is such that it's better not to ACVP test such code. Change-Id: I0c6d3a38bce9bf5766b889677eb3f7de94262c24 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/45465 Reviewed-by: David Benjamin <davidben@google.com>
diff --git a/util/fipstools/acvp/modulewrapper/modulewrapper.cc b/util/fipstools/acvp/modulewrapper/modulewrapper.cc index b354280..a08e670 100644 --- a/util/fipstools/acvp/modulewrapper/modulewrapper.cc +++ b/util/fipstools/acvp/modulewrapper/modulewrapper.cc
@@ -676,6 +676,7 @@ }, { "algorithm": "CMAC-AES", + "acvptoolTestOnly": true, "revision": "1.0", "capabilities": [{ "direction": ["gen", "ver"],