From 47c239c6b8d6e5d66a6ceef3a2c543b6ea338759 Mon Sep 17 00:00:00 2001 From: Shane Lontis Date: Tue, 3 Mar 2020 14:02:36 +1000 Subject: Add pairwise consistency self tests to asym keygenerators Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/10952) --- crypto/dh/dh_gen.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'crypto/dh') diff --git a/crypto/dh/dh_gen.c b/crypto/dh/dh_gen.c index 8e2b773..f8cda1b 100644 --- a/crypto/dh/dh_gen.c +++ b/crypto/dh/dh_gen.c @@ -1,5 +1,5 @@ /* - * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved. + * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved. * * Licensed under the Apache License 2.0 (the "License"). You may not use * this file except in compliance with the License. You can obtain a copy @@ -15,6 +15,11 @@ /* * DH low level APIs are deprecated for public use, but still ok for * internal use. + * + * NOTE: When generating keys for key-agreement schemes - FIPS 140-2 IG 9.9 + * states that no additional pairwise tests are required (apart from the tests + * specified in SP800-56A) when generating keys. Hence DH pairwise tests are + * omitted here. */ #include "internal/deprecated.h" -- cgit v1.1