wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 12:00:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

* add hard compile-time assert in settings.h for FIPS v7+ asserting that WOLFSSL_MIN_AUTH_TAG_SZ meets SP 800-38D Rev 1 requirements.

Browse Source
This commit is contained in:
Daniel Pouzzner
2026-06-27 14:29:06 -05:00
parent 7545798248
commit 948ba6ec10
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfssl/wolfcrypt/settings.h
+6
View File
@@ -3558,6 +3558,12 @@
#error WOLFSSL_MIN_AUTH_TAG_SZ must be at least 1
#endif
#if defined(HAVE_FIPS) && FIPS_VERSION3_GE(7, 0, 0)
/* No short (<96 bit) tags per SP 800-38D 2026 revision in process. */
#if WOLFSSL_MIN_AUTH_TAG_SZ < 12
#error WOLFSSL_MIN_AUTH_TAG_SZ must be >= 12 per SP 800-38D Rev 1
#endif
#endif
/* sniffer requires:
* static RSA cipher suites