Bug 2118695

Summary: Address review comments from lab
Product: Red Hat Enterprise Linux 9 Reporter: Jakub Jelen <jjelen>
Component: libgcryptAssignee: Jakub Jelen <jjelen>
Status: CLOSED CURRENTRELEASE QA Contact: Stanislav Zidek <szidek>
Severity: unspecified Docs Contact:
Priority: high    
Version: 9.1CC: cllang, tscherf
Target Milestone: rcKeywords: Triaged, ZStream
Target Release: 9.1Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: libgcrypt-1.10.0-7.el9_1 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of:
: 2118915 2130275 (view as bug list) Environment:
Last Closed: 2023-06-05 16:01:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2118915, 2130275    

Description Jakub Jelen 2022-08-16 13:25:55 UTC 
THe following issues were identified by the lab and we need to address them to pass FIPS certification:

* Add function-name based FIPS indicator
* Run digest&sign self tests for RSA and ECC in FIPS mode
* Run RSA-OAEP encryption selftest ??
* Run PCT in FIPS mode also with digest step (RSA, ECC)

https://gitlab.com/redhat-crypto/libgcrypt/libgcrypt-mirror/-/merge_requests/4/

* Reseed the drbg input by calling getrandom(GRND_RANDOM) (WIP)
Comment 5 Clemens Lang 2023-06-05 16:01:53 UTC 
RHEL 9.1 contains libgcrypt-1.10.0-7.el9_0.