From 283ed5357fee095a05339775a9f75b7c7a7e92fc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tobias=20Nie=C3=9Fen?= Date: Wed, 21 May 2025 01:38:15 +0100 Subject: [PATCH] test: do not skip OCB decryption in FIPS mode I believe that OCB should work in FIPS mode, and only CCM should be skipped here. PR-URL: https://github.com/nodejs/node/pull/58382 Reviewed-By: James M Snell Reviewed-By: Richard Lau Reviewed-By: Luigi Pinca --- test/parallel/test-crypto-authenticated.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/test/parallel/test-crypto-authenticated.js b/test/parallel/test-crypto-authenticated.js index 595533afddb..c75b58f43fb 100644 --- a/test/parallel/test-crypto-authenticated.js +++ b/test/parallel/test-crypto-authenticated.js @@ -304,7 +304,7 @@ for (const test of TEST_CASES) { } // Test that create(De|C)ipheriv throws if the mode is CCM or OCB and no -// authentication tag has been specified. +// authentication tag length has been specified. { for (const mode of ['ccm', 'ocb']) { assert.throws(() => { @@ -316,7 +316,7 @@ for (const test of TEST_CASES) { }); // CCM decryption is unsupported in FIPS mode. - if (!isFipsEnabled) { + if (!isFipsEnabled || mode !== 'ccm') { assert.throws(() => { crypto.createDecipheriv(`aes-256-${mode}`, 'FxLKsqdmv0E9xrQhp0b1ZgI0K7JFZJM8',