DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

OpenSSL: Use internal FIPS 186-2 PRF with OpenSSL 3.0

Browse source 
OpenSSL 3.0 has deprecated the low-level SHA1 functions and does not
include an upper layer interface that could be used to use the
SHA1_Transform() function. Use the internal SHA-1 implementation instead
as a workaround.

While this type of duplicate implementation of SHA-1 is not really
ideal, this PRF is needed only for EAP-SIM/AKA and there does not seem
to be sufficient justification to try to get this working more cleanly
with OpenSSL 3.0.

Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen 2022-05-26 23:35:16 +03:00
parent 9e305878c0
commit 5c87fcc154
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
src/crypto/fips_prf_openssl.c
View file

@ -7,6 +7,19 @@
*/
#include "includes.h"
#include <openssl/opensslv.h>
#if OPENSSL_VERSION_NUMBER >= 0x30000000L
/* OpenSSL 3.0 has deprecated the low-level SHA1 functions and does not
* include an upper layer interface that could be used to use the
* SHA1_Transform() function. Use the internal SHA-1 implementation instead
* as a workaround. */
#include "sha1-internal.c"
#include "fips_prf_internal.c"
#else /* OpenSSL version >= 3.0 */
#include <openssl/sha.h>
#include "common.h"
@ -97,3 +110,5 @@ int fips186_2_prf(const u8 *seed, size_t seed_len, u8 *x, size_t xlen)
return 0;
}
#endif /* OpenSSL version >= 3.0 */