Skip to content

Testing: AES GCM opps with IV < 96-bits now returns WC_FIPS_NOT_APPROVED with FIPS #10959

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
SparkiDev merged 3 commits into from
Jul 22, 2026
+7 −3
Merged

Testing: AES GCM opps with IV < 96-bits now returns WC_FIPS_NOT_APPROVED with FIPS #10959

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
527154d
Testing: AES GCM opps with IV < 96-bits now returns WC_FIPS_NOT_APPRO…
lealem47 Jul 21, 2026
7b7ce70
.wolfssl_known_macro_extras: restore C lexical sort order for fipsCas…
night1rider Jul 21, 2026
9548753
Remove embedding of macros within a function call
lealem47 Jul 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .wolfssl_known_macro_extras
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1078,8 +1078,6 @@ XGETPASSWD
XMSS_CALL_PRF_KEYGEN
XPAR_VERSAL_CIPS_0_PSPMC_0_PSV_CORTEXA72_0_TIMESTAMP_CLK_FREQ
XSECURE_CACHE_DISABLE
fipsCastStatus_get
wc_Des3_SetKey
_ABI64
_ABIO64
_ARCH_PPC64
Expand Down Expand Up @@ -1262,8 +1260,10 @@ __xtensa__
byte
configTICK_RATE_HZ
fallthrough
fipsCastStatus_get
noinline
ssize_t
sun
versal
wc_Des3_SetKey
wc_Tls13_HKDF_Expand_Label
6 changes: 5 additions & 1 deletion tests/api/test_aes.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9239,8 +9239,12 @@ int test_wc_AesGcmArgMcdc(void)
* self-contained demonstration). */
ExpectIntEQ(wc_AesGcmSetIV(&aes, 10, NULL, 0, &rng),
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
#if defined(HAVE_FIPS) && FIPS_VERSION3_GE(7,0,0)
ExpectIntEQ(wc_AesGcmSetIV(&aes, GCM_NONCE_MIN_SZ, NULL, 0, &rng),
0);
WC_FIPS_NOT_APPROVED);
#else
ExpectIntEQ(wc_AesGcmSetIV(&aes, GCM_NONCE_MIN_SZ, NULL, 0, &rng), 0);
#endif
ExpectIntEQ(wc_AesGcmSetIV(&aes, GCM_NONCE_MID_SZ, NULL, 0, &rng),
0);
ExpectIntEQ(wc_AesGcmSetIV(&aes, GCM_NONCE_MAX_SZ, NULL, 0, &rng),
Expand Down
Loading