Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

make HMAC work in strict FIPS mode #355

Merged
merged 2 commits into from
Sep 11, 2019
Merged

make HMAC work in strict FIPS mode #355

merged 2 commits into from
Sep 11, 2019

Commits on Sep 6, 2019

  1. don't redefine block_size for HMAC objects

    on new FIPS compliant Python HMAC is implemented as a thin wrapper around
    openssl implementation of HMAC, that makes it impossible to add a
    field to the hmac object, but they actually do have the block_size
    field and set it to correct values
    tomato42 committed Sep 6, 2019
    Configuration menu
    Copy the full SHA
    81bc763 View commit details
    Browse the repository at this point in the history

Commits on Sep 10, 2019

  1. re-implement HMAC in pure python

    as new python uses OpenSSL to implement HMAC (so that it is FIPS
    compliant), using MD5 for HMAC will not work
    
    as we need it for older ciphers (and to verify that those old ciphers
    don't work in FIPS mode) we need to overwrite that limitation
    tomato42 committed Sep 10, 2019
    Configuration menu
    Copy the full SHA
    4c2659f View commit details
    Browse the repository at this point in the history