Commit d05263e
test: do not skip OCB decryption in FIPS mode
I believe that OCB should work in FIPS mode, and only CCM should be
skipped here.
PR-URL: #58382
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>1 parent 23474cb commit d05263e
1 file changed
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -304,7 +304,7 @@ for (const test of TEST_CASES) { | |||
| 304 | 304 | } | |
| 305 | 305 | ||
| 306 | 306 | // Test that create(De|C)ipheriv throws if the mode is CCM or OCB and no | |
| 307 | - // authentication tag has been specified. | ||
| 307 | + // authentication tag length has been specified. | ||
| 308 | 308 | { | |
| 309 | 309 | for (const mode of ['ccm', 'ocb']) { | |
| 310 | 310 | assert.throws(() => { | |
@@ -316,7 +316,7 @@ for (const test of TEST_CASES) { | |||
| 316 | 316 | }); | |
| 317 | 317 | ||
| 318 | 318 | // CCM decryption is unsupported in FIPS mode. | |
| 319 | - if (!isFipsEnabled) { | ||
| 319 | + if (!isFipsEnabled || mode !== 'ccm') { | ||
| 320 | 320 | assert.throws(() => { | |
| 321 | 321 | crypto.createDecipheriv(`aes-256-${mode}`, | |
| 322 | 322 | 'FxLKsqdmv0E9xrQhp0b1ZgI0K7JFZJM8', | |
0 commit comments