DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

wolfSSL: Set up generator manually in FIPS build

Browse source 
Signed-off-by: Juliusz Sosinowicz <juliusz@wolfssl.com>
This commit is contained in:
Juliusz Sosinowicz 2023-03-08 18:18:50 +01:00 committed by Jouni Malinen
parent 8dabc1fede
commit b37238d3ac
1 changed files with 23 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
src/crypto/crypto_wolfssl.c
View file

@ -1667,11 +1667,34 @@ struct crypto_ec * crypto_ec_init(int group)
LOG_WOLF_ERROR_FUNC_NULL(wc_ecc_new_point); LOG_WOLF_ERROR_FUNC_NULL(wc_ecc_new_point);
goto done; goto done;
} }
#ifdef CONFIG_FIPS
/* Setup generator manually in FIPS mode */
if (!e->key->dp) {
LOG_WOLF_ERROR_FUNC_NULL(e->key->dp);
goto done;
}
err = mp_read_radix(e->g->x, e->key->dp->Gx, MP_RADIX_HEX);
if (err != MP_OKAY) {
LOG_WOLF_ERROR_FUNC(mp_read_radix, err);
goto done;
}
err = mp_read_radix(e->g->y, e->key->dp->Gy, MP_RADIX_HEX);
if (err != MP_OKAY) {
LOG_WOLF_ERROR_FUNC(mp_read_radix, err);
goto done;
}
err = mp_set(e->g->z, 1);
if (err != MP_OKAY) {
LOG_WOLF_ERROR_FUNC(mp_set, err);
goto done;
}
#else /* CONFIG_FIPS */
err = wc_ecc_get_generator(e->g, wc_ecc_get_curve_idx(curve_id)); err = wc_ecc_get_generator(e->g, wc_ecc_get_curve_idx(curve_id));
if (err != MP_OKAY) { if (err != MP_OKAY) {
LOG_WOLF_ERROR_FUNC(wc_ecc_get_generator, err); LOG_WOLF_ERROR_FUNC(wc_ecc_get_generator, err);
goto done; goto done;
} }
#endif /* CONFIG_FIPS */
#endif /* CONFIG_DPP */ #endif /* CONFIG_DPP */
err = mp_init_multi(&e->a, &e->prime, &e->order, &e->b, NULL, NULL); err = mp_init_multi(&e->a, &e->prime, &e->order, &e->b, NULL, NULL);
if (err != MP_OKAY) { if (err != MP_OKAY) {