1berry/nodejs
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

test: do not skip OCB decryption in FIPS mode

Browse Source 
I believe that OCB should work in FIPS mode, and only CCM should be
skipped here.

PR-URL: https://github.com/nodejs/node/pull/58382
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
This commit is contained in:
Tobias Nießen 2025-05-21 01:38:15 +01:00 committed by GitHub
parent 0bbe5d34e7
commit 283ed5357f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
test/parallel/test-crypto-authenticated.js
View File

@ -304,7 +304,7 @@ for (const test of TEST_CASES) {
}
// Test that create(De|C)ipheriv throws if the mode is CCM or OCB and no
// authentication tag has been specified.
// authentication tag length has been specified.
{
for (const mode of ['ccm', 'ocb']) {
assert.throws(() => {
@ -316,7 +316,7 @@ for (const test of TEST_CASES) {
});
// CCM decryption is unsupported in FIPS mode.
if (!isFipsEnabled) {
if (!isFipsEnabled || mode !== 'ccm') {
assert.throws(() => {
crypto.createDecipheriv(`aes-256-${mode}`,
'FxLKsqdmv0E9xrQhp0b1ZgI0K7JFZJM8',