summaryrefslogtreecommitdiffstats
path: root/README.md
diff options
context:
space:
mode:
authorIngo Franzki <ifranzki@linux.ibm.com>2024-08-26 11:26:03 +0200
committerTomas Mraz <tomas@openssl.org>2024-09-03 21:15:00 +0200
commita75d62637aa165a7f37e39a3a36e2a8b089913bc (patch)
treeadd56d8ec1c6e6b3a4b8c4208e3f32b04babdcce /README.md
parentAdd CVE-2024-5535 to CHANGES and NEWS (diff)
downloadopenssl-a75d62637aa165a7f37e39a3a36e2a8b089913bc.tar.xz
openssl-a75d62637aa165a7f37e39a3a36e2a8b089913bc.zip
s390x: Disable HMAC hardware acceleration when an engine is used for the digest
The TLSProxy uses the 'ossltest' engine to produce known output for digests and HMAC calls. However, when running on a s390x system that supports hardware acceleration of HMAC, the engine is not used for calculating HMACs, but the s390x specific HMAC implementation is used, which does produce correct output, but not the known output that the engine would produce. This causes some tests (i.e. test_key_share, test_sslextension, test_sslrecords, test_sslvertol, and test_tlsextms) to fail. Disable the s390x HMAC hardware acceleration if an engine is used for the digest of the HMAC calculation. This provides compatibility for engines that provide digest implementations, and assume that these implementations are also used when calculating an HMAC. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25287)
Diffstat (limited to 'README.md')
0 files changed, 0 insertions, 0 deletions