ShuriZma
/
xemu
mirror of https://github.com/xemu-project/xemu.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

crypto: check gnutls & gcrypt support the requested pbkdf hash 

Both gnutls and gcrypt can be configured to exclude support for certain
algorithms via a runtime check against system crypto policies. Thus it
is not sufficient to have a compile time test for hash support in their
pbkdf implementations.

Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
This commit is contained in:
Daniel P. Berrangé 2024-08-29 14:47:42 +01:00
parent c72cab5ad9
commit e6c09ea4f9
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
crypto/pbkdf-gcrypt.c
View File

@ -33,7 +33,7 @@ bool qcrypto_pbkdf2_supports(QCryptoHashAlgorithm hash)
case QCRYPTO_HASH_ALG_SHA384: case QCRYPTO_HASH_ALG_SHA384:
case QCRYPTO_HASH_ALG_SHA512: case QCRYPTO_HASH_ALG_SHA512:
case QCRYPTO_HASH_ALG_RIPEMD160: case QCRYPTO_HASH_ALG_RIPEMD160:
return true; return qcrypto_hash_supports(hash);
default: default:
return false; return false;
} }

2
crypto/pbkdf-gnutls.c
View File

@ -33,7 +33,7 @@ bool qcrypto_pbkdf2_supports(QCryptoHashAlgorithm hash)
case QCRYPTO_HASH_ALG_SHA384: case QCRYPTO_HASH_ALG_SHA384:
case QCRYPTO_HASH_ALG_SHA512: case QCRYPTO_HASH_ALG_SHA512:
case QCRYPTO_HASH_ALG_RIPEMD160: case QCRYPTO_HASH_ALG_RIPEMD160:
return true; return qcrypto_hash_supports(hash);
default: default:
return false; return false;
} }