allow sha1 in OAEP (pyca#11536)

alex · web-flow · commit aa3e70e086b1 · 2024-09-03T17:19:02.000-07:00
fixes pyca#11512
diff --git a/src/rust/src/backend/rsa.rs b/src/rust/src/backend/rsa.rs
@@ -70,7 +70,7 @@ fn generate_private_key(public_exponent: u32, key_size: u32) -> CryptographyResu
 }
 
 fn oaep_hash_supported(md: &openssl::hash::MessageDigest) -> bool {
-    (!cryptography_openssl::fips::is_enabled() && md == &openssl::hash::MessageDigest::sha1())
+    md == &openssl::hash::MessageDigest::sha1()
         || md == &openssl::hash::MessageDigest::sha224()
         || md == &openssl::hash::MessageDigest::sha256()
         || md == &openssl::hash::MessageDigest::sha384()

Original file line number	Diff line number	Diff line change
`@@ -70,7 +70,7 @@ fn generate_private_key(public_exponent: u32, key_size: u32) -> CryptographyResu`
`70`	`70`	`}`
`71`	`71`
`72`	`72`	`fn oaep_hash_supported(md: &openssl::hash::MessageDigest) -> bool {`
`73`		`- (!cryptography_openssl::fips::is_enabled() && md == &openssl::hash::MessageDigest::sha1())`
	`73`	`+ md == &openssl::hash::MessageDigest::sha1()`
`74`	`74`	`\|\| md == &openssl::hash::MessageDigest::sha224()`
`75`	`75`	`\|\| md == &openssl::hash::MessageDigest::sha256()`
`76`	`76`	`\|\| md == &openssl::hash::MessageDigest::sha384()`