From 83d71ee5cc1ad146b32b8274b0529a684c2db59e Mon Sep 17 00:00:00 2001 From: Jeremiah Mackey Date: Tue, 14 Apr 2026 15:40:06 +0000 Subject: [PATCH] guard DES3 length test with HAVE_FIPS --- tests/api/test_des3.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/tests/api/test_des3.c b/tests/api/test_des3.c index 572428e1c3..4618088401 100644 --- a/tests/api/test_des3.c +++ b/tests/api/test_des3.c @@ -165,11 +165,15 @@ int test_wc_Des3_CbcEncryptDecrypt(void) ExpectIntEQ(wc_Des3_CbcDecrypt(&des, plain, NULL, 24), WC_NO_ERR_TRACE(BAD_FUNC_ARG)); - /* non-block-aligned input rejected with BAD_LENGTH_E */ +#ifndef HAVE_FIPS + /* non-block-aligned input rejected with BAD_LENGTH_E. + * FIPS builds use the FIPS-certified DES3 implementation which does not + * have this check, so skip the test for FIPS. */ ExpectIntEQ(wc_Des3_CbcEncrypt(&des, cipher, vector, DES_BLOCK_SIZE - 1), WC_NO_ERR_TRACE(BAD_LENGTH_E)); ExpectIntEQ(wc_Des3_CbcDecrypt(&des, plain, cipher, DES_BLOCK_SIZE - 1), WC_NO_ERR_TRACE(BAD_LENGTH_E)); +#endif wc_Des3Free(&des); #endif