|
 |
7dd5c5 |
From 3c04b692de1e7b45b764ff8d66bf84609b012e3a Mon Sep 17 00:00:00 2001
|
|
|
7dd5c5 |
From: Tobias Heider <tobias.heider@canonical.com>
|
|
|
7dd5c5 |
Date: Tue, 27 Sep 2022 13:31:05 +0900
|
|
|
7dd5c5 |
Subject: [PATCH] kdf:pkdf2: Check minimum allowed key size when running in
|
|
|
7dd5c5 |
FIPS mode.
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
* cipher/kdf.c (_gcry_kdf_pkdf2): Add output length check.
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
--
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
GnuPG-bug-id: 6219
|
|
|
7dd5c5 |
---
|
|
|
7dd5c5 |
cipher/kdf.c | 4 ++++
|
|
|
7dd5c5 |
1 file changed, 4 insertions(+)
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
diff --git a/cipher/kdf.c b/cipher/kdf.c
|
|
|
7dd5c5 |
index 81523320..67c60df8 100644
|
|
|
7dd5c5 |
--- a/cipher/kdf.c
|
|
|
7dd5c5 |
+++ b/cipher/kdf.c
|
|
|
7dd5c5 |
@@ -160,6 +160,10 @@ _gcry_kdf_pkdf2 (const void *passphrase, size_t passphraselen,
|
|
|
7dd5c5 |
return GPG_ERR_INV_VALUE;
|
|
|
7dd5c5 |
#endif
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
+ /* Check minimum key size */
|
|
|
7dd5c5 |
+ if (fips_mode () && dklen < 14)
|
|
|
7dd5c5 |
+ return GPG_ERR_INV_VALUE;
|
|
|
7dd5c5 |
+
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
/* Step 2 */
|
|
|
7dd5c5 |
l = ((dklen - 1)/ hlen) + 1;
|
|
|
7dd5c5 |
--
|
|
|
7dd5c5 |
2.37.3
|
|
|
7dd5c5 |
From e5a5e847b66eb6b80e60a2dffa347268f059aee3 Mon Sep 17 00:00:00 2001
|
|
|
7dd5c5 |
From: Jakub Jelen <jjelen@redhat.com>
|
|
|
7dd5c5 |
Date: Tue, 4 Oct 2022 12:44:54 +0200
|
|
|
7dd5c5 |
Subject: [PATCH] tests: Reproducer for short dklen in FIPS mode
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
* tests/t-kdf.c (check_pbkdf2): Add test vector with short dklen and
|
|
|
7dd5c5 |
verify it fails in FIPS mode
|
|
|
7dd5c5 |
--
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
GnuPG-bug-id: 6219
|
|
|
7dd5c5 |
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
|
|
|
7dd5c5 |
---
|
|
|
7dd5c5 |
tests/t-kdf.c | 12 ++++++++++--
|
|
|
7dd5c5 |
1 file changed, 10 insertions(+), 2 deletions(-)
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
diff --git a/tests/t-kdf.c b/tests/t-kdf.c
|
|
|
7dd5c5 |
index c0192d7b..716fb53e 100644
|
|
|
7dd5c5 |
--- a/tests/t-kdf.c
|
|
|
7dd5c5 |
+++ b/tests/t-kdf.c
|
|
|
7dd5c5 |
@@ -909,6 +909,14 @@ check_pbkdf2 (void)
|
|
|
7dd5c5 |
"\x0c\x60\xc8\x0f\x96\x1f\x0e\x71\xf3\xa9"
|
|
|
7dd5c5 |
"\xb5\x24\xaf\x60\x12\x06\x2f\xe0\x37\xa6"
|
|
|
7dd5c5 |
},
|
|
|
7dd5c5 |
+ {
|
|
|
7dd5c5 |
+ "password", 8,
|
|
|
7dd5c5 |
+ "salt", 4,
|
|
|
7dd5c5 |
+ GCRY_MD_SHA1,
|
|
|
7dd5c5 |
+ 1,
|
|
|
7dd5c5 |
+ 10, /* too short dklen for FIPS */
|
|
|
7dd5c5 |
+ "\x0c\x60\xc8\x0f\x96\x1f\x0e\x71\xf3\xa9"
|
|
|
7dd5c5 |
+ },
|
|
|
7dd5c5 |
{
|
|
|
7dd5c5 |
"password", 8,
|
|
|
7dd5c5 |
"salt", 4,
|
|
|
7dd5c5 |
@@ -1109,7 +1117,7 @@ check_pbkdf2 (void)
|
|
|
7dd5c5 |
GCRY_KDF_PBKDF2, tv[tvidx].hashalgo,
|
|
|
7dd5c5 |
tv[tvidx].salt, tv[tvidx].saltlen,
|
|
|
7dd5c5 |
tv[tvidx].c, tv[tvidx].dklen, outbuf);
|
|
|
7dd5c5 |
- if (in_fips_mode && tvidx > 6)
|
|
|
7dd5c5 |
+ if (in_fips_mode && tvidx > 7)
|
|
|
7dd5c5 |
{
|
|
|
7dd5c5 |
if (!err)
|
|
|
7dd5c5 |
fail ("pbkdf2 test %d unexpectedly passed in FIPS mode: %s\n",
|
|
|
7dd5c5 |
@@ -1118,7 +1126,7 @@ check_pbkdf2 (void)
|
|
|
7dd5c5 |
}
|
|
|
7dd5c5 |
if (err)
|
|
|
7dd5c5 |
{
|
|
|
7dd5c5 |
- if (in_fips_mode && tv[tvidx].plen < 14)
|
|
|
7dd5c5 |
+ if (in_fips_mode && (tv[tvidx].plen < 14 || tv[tvidx].dklen < 14))
|
|
|
7dd5c5 |
{
|
|
|
7dd5c5 |
if (verbose)
|
|
|
7dd5c5 |
fprintf (stderr,
|
|
|
7dd5c5 |
--
|
|
|
7dd5c5 |
2.37.3
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
From f4a861f3e5ae82f278284061e4829c03edf9c3a7 Mon Sep 17 00:00:00 2001
|
|
|
7dd5c5 |
From: Jakub Jelen <jjelen@redhat.com>
|
|
|
7dd5c5 |
Date: Fri, 18 Nov 2022 09:49:50 +0900
|
|
|
7dd5c5 |
Subject: [PATCH] pkdf2: Add checks for FIPS.
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
* cipher/kdf.c (_gcry_kdf_pkdf2): Require 8 chars passphrase for FIPS.
|
|
|
7dd5c5 |
Set bounds for salt length and iteration count in FIPS mode.
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
--
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
GnuPG-bug-id: 6039
|
|
|
7dd5c5 |
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
|
|
|
7dd5c5 |
---
|
|
|
7dd5c5 |
cipher/kdf.c | 12 ++++++++++++
|
|
|
7dd5c5 |
1 file changed, 12 insertions(+)
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
diff --git a/cipher/kdf.c b/cipher/kdf.c
|
|
|
7dd5c5 |
index d22584da..823c744e 100644
|
|
|
7dd5c5 |
--- a/cipher/kdf.c
|
|
|
7dd5c5 |
+++ b/cipher/kdf.c
|
|
|
7dd5c5 |
@@ -160,6 +160,18 @@ _gcry_kdf_pkdf2 (const void *passphrase, size_t passphraselen,
|
|
|
7dd5c5 |
return GPG_ERR_INV_VALUE;
|
|
|
7dd5c5 |
#endif
|
|
|
7dd5c5 |
|
|
|
7dd5c5 |
+ /* FIPS requires minimum passphrase length, see FIPS 140-3 IG D.N */
|
|
|
7dd5c5 |
+ if (fips_mode () && passphraselen < 8)
|
|
|
7dd5c5 |
+ return GPG_ERR_INV_VALUE;
|
|
|
7dd5c5 |
+
|
|
|
7dd5c5 |
+ /* FIPS requires minimum salt length of 128 b (SP 800-132 sec. 5.1, p.6) */
|
|
|
7dd5c5 |
+ if (fips_mode () && saltlen < 16)
|
|
|
7dd5c5 |
+ return GPG_ERR_INV_VALUE;
|
|
|
7dd5c5 |
+
|
|
|
7dd5c5 |
+ /* FIPS requires minimum iterations bound (SP 800-132 sec 5.2, p.6) */
|
|
|
7dd5c5 |
+ if (fips_mode () && iterations < 1000)
|
|
|
7dd5c5 |
+ return GPG_ERR_INV_VALUE;
|
|
|
7dd5c5 |
+
|
|
|
7dd5c5 |
/* Check minimum key size */
|
|
|
7dd5c5 |
if (fips_mode () && dklen < 14)
|
|
|
7dd5c5 |
return GPG_ERR_INV_VALUE;
|
|
|
7dd5c5 |
--
|
|
|
7dd5c5 |
2.39.0
|
|
|
7dd5c5 |
|