security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-01-03 12:11:33 +01:00
Code Activity

gpg: Use GCRY_KDF_ONESTEP_KDF for FIPS.

Browse Source 
* g10/ecdh.c (derive_kek): Use KDF API of libgcrypt.

--

GnuPG-bug-id: 5964
Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
This commit is contained in:
NIIBE Yutaka 2022-06-16 15:44:56 +09:00
parent 2766b9e56c
commit c281bd9434
1 changed files with 13 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
g10/ecdh.c
View File

@ -189,25 +189,22 @@ derive_kek (size_t kek_size,
const unsigned char *kdf_params, size_t kdf_params_size) const unsigned char *kdf_params, size_t kdf_params_size)
{ {
gpg_error_t err; gpg_error_t err;
gcry_md_hd_t h; gcry_kdf_hd_t hd;
unsigned long param[1];
log_assert( gcry_md_get_algo_dlen (kdf_hash_algo) >= 32 ); param[0] = kek_size;
err = gcry_kdf_open (&hd, GCRY_KDF_ONESTEP_KDF, kdf_hash_algo,
err = gcry_md_open (&h, kdf_hash_algo, 0); param, 1,
if (err) secret_x, secret_x_size, NULL, 0, NULL, 0,
kdf_params, kdf_params_size);
if (!err)
{ {
log_error ("gcry_md_open failed for kdf_hash_algo %d: %s", gcry_kdf_compute (hd, NULL);
kdf_hash_algo, gpg_strerror (err)); gcry_kdf_final (hd, kek_size, secret_x);
return err; gcry_kdf_close (hd);
}
gcry_md_write(h, "\x00\x00\x00\x01", 4); /* counter = 1 */
gcry_md_write(h, secret_x, secret_x_size); /* x of the point X */
gcry_md_write(h, kdf_params, kdf_params_size); /* KDF parameters */
gcry_md_final (h);
memcpy (secret_x, gcry_md_read (h, kdf_hash_algo), kek_size);
gcry_md_close (h);
/* Clean the tail before returning. */ /* Clean the tail before returning. */
memset (secret_x+kek_size, 0, secret_x_size - kek_size); memset (secret_x+kek_size, 0, secret_x_size - kek_size);
}
if (DBG_CRYPTO) if (DBG_CRYPTO)
log_printhex (secret_x, kek_size, "ecdh KEK is:"); log_printhex (secret_x, kek_size, "ecdh KEK is:");
return err; return err;