Skip to content

Commit c193179

Browse files
committed
fips: Consider EDDSA key generation and signature mechanism approved
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
1 parent e55417c commit c193179

File tree

1 file changed

+14
-1
lines changed

1 file changed

+14
-1
lines changed

src/fips/indicators.rs

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -283,7 +283,7 @@ struct FipsMechanism {
283283
/// Struct that holds FIPS properties for keys and mechanisms
284284
struct FipsChecks {
285285
keys: [FipsKeyType; 17],
286-
mechs: [FipsMechanism; 91],
286+
mechs: [FipsMechanism; 93],
287287
}
288288

289289
/// A constant instantiation of FIPS properties with a list
@@ -552,6 +552,19 @@ const FIPS_CHECKS: FipsChecks = FipsChecks {
552552
restrictions: [restrict!(CKK_EC), restrict!()],
553553
genflags: 0,
554554
},
555+
/* EDDSA */
556+
FipsMechanism {
557+
mechanism: CKM_EC_EDWARDS_KEY_PAIR_GEN,
558+
operations: CKF_GENERATE_KEY_PAIR,
559+
restrictions: [restrict!(CKK_EC_EDWARDS), restrict!()],
560+
genflags: CKF_SIGN | CKF_VERIFY,
561+
},
562+
FipsMechanism {
563+
mechanism: CKM_EDDSA,
564+
operations: CKF_SIGN | CKF_VERIFY,
565+
restrictions: [restrict!(CKK_EC_EDWARDS), restrict!()],
566+
genflags: 0,
567+
},
555568
/* AES */
556569
FipsMechanism {
557570
mechanism: CKM_AES_KEY_GEN,

0 commit comments

Comments
 (0)