[openssl/openssl] bc4315: Add FIPS indicator support for Triple-DES encryption.

[Shane]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: bc43158797a7f8bc36cb736524bf812db7d8635e
      https://github.com/openssl/openssl/commit/bc43158797a7f8bc36cb736524bf812db7d8635e
  Author: slontis <shane.lontis at oracle.com>
  Date:   2024-07-26 (Fri, 26 Jul 2024)

  Changed paths:
    M apps/fipsinstall.c
    M doc/man1/openssl-fipsinstall.pod.in
    M doc/man3/EVP_EncryptInit.pod
    M doc/man7/EVP_CIPHER-DES.pod
    M include/openssl/fips_names.h
    M providers/common/include/prov/fipscommon.h
    M providers/fips/fipsprov.c
    M providers/implementations/ciphers/cipher_tdes.h
    M providers/implementations/ciphers/cipher_tdes_common.c
    M providers/implementations/macs/cmac_prov.c
    M test/evp_libctx_test.c
    M test/evp_test.c
    M test/recipes/30-test_evp_data/evpciph_des3_common.txt
    M test/recipes/30-test_evp_data/evpmac_cmac_des.txt
    M test/recipes/80-test_cms.t
    M util/mk-fipsmodule-cnf.pl
    M util/perl/OpenSSL/paramnames.pm

  Log Message:
  -----------
  Add FIPS indicator support for Triple-DES encryption.

This leaves 3DES with the FIPS query "FIPS=yes", which allows
Triple-DES to be used for Decryption by default.

Disallow CMAC using Triple-DES in FIPS.
This does not use a FIPS indicator.

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/24960)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications