From: Dr. Stephen Henson <steve@openssl.org>
Date: Thu, 10 Feb 2011 01:46:25 +0000 (+0000)
Subject: Disable FIPS restrictions when doing GCM testing.
X-Git-Tag: OpenSSL-fips-2_0-rc1~769
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=a4113c52b227182627c1a102ff70245d210cb669;p=openssl

Disable FIPS restrictions when doing GCM testing.
---

diff --git a/fips/aes/fips_gcmtest.c b/fips/aes/fips_gcmtest.c
index 32bbf3b321..e7bcad0dca 100644
--- a/fips/aes/fips_gcmtest.c
+++ b/fips/aes/fips_gcmtest.c
@@ -176,6 +176,8 @@ static void gcmtest(int encrypt)
 			{
 			tag = OPENSSL_malloc(taglen);
 			EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 1);
+			/* Relax FIPS constraints for testing */
+			M_EVP_CIPHER_CTX_set_flags(&ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW);
 			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0);
 			if (encrypt == 1)
 				{
@@ -227,6 +229,8 @@ static void gcmtest(int encrypt)
 		if (!encrypt && tag)
 			{
 			EVP_CipherInit_ex(&ctx, gcm, NULL, NULL, NULL, 0);
+			/* Relax FIPS constraints for testing */
+			M_EVP_CIPHER_CTX_set_flags(&ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW);
 			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_IVLEN, ivlen, 0);
 			EVP_CipherInit_ex(&ctx, NULL, NULL, key, iv, 0);
 			EVP_CIPHER_CTX_ctrl(&ctx, EVP_CTRL_GCM_SET_TAG, taglen, tag);