aboutsummaryrefslogtreecommitdiffstats
path: root/src/crypto/md5.h
diff options
context:
space:
mode:
authorJouni Malinen <j@w1.fi>2009-08-16 15:56:48 (GMT)
committerJouni Malinen <j@w1.fi>2009-08-16 15:56:48 (GMT)
commitff916b9df7ec5f691c7adca5cae059158a09d06f (patch)
treec6a70161e98f0cfe92eae008abe56a9f518079ff /src/crypto/md5.h
parentbe299ca4ce9423cfc4fd30182bd1f9f6742bb200 (diff)
downloadhostap-ff916b9df7ec5f691c7adca5cae059158a09d06f.zip
hostap-ff916b9df7ec5f691c7adca5cae059158a09d06f.tar.gz
hostap-ff916b9df7ec5f691c7adca5cae059158a09d06f.tar.bz2
Allow non-FIPS MD5 to be used with TLS PRF even in FIPS mode
This is allowed per FIPS1402IG.pdf since the TLS PRF depends fully on both MD5 and SHA-1.
Diffstat (limited to 'src/crypto/md5.h')
-rw-r--r--src/crypto/md5.h10
1 files changed, 10 insertions, 0 deletions
diff --git a/src/crypto/md5.h b/src/crypto/md5.h
index 40ab630..8952590 100644
--- a/src/crypto/md5.h
+++ b/src/crypto/md5.h
@@ -21,5 +21,15 @@ int hmac_md5_vector(const u8 *key, size_t key_len, size_t num_elem,
const u8 *addr[], const size_t *len, u8 *mac);
int hmac_md5(const u8 *key, size_t key_len, const u8 *data, size_t data_len,
u8 *mac);
+#ifdef CONFIG_FIPS
+int hmac_md5_vector_non_fips_allow(const u8 *key, size_t key_len,
+ size_t num_elem, const u8 *addr[],
+ const size_t *len, u8 *mac);
+int hmac_md5_non_fips_allow(const u8 *key, size_t key_len, const u8 *data,
+ size_t data_len, u8 *mac);
+#else /* CONFIG_FIPS */
+#define hmac_md5_vector_non_fips_allow hmac_md5_vector
+#define hmac_md5_non_fips_allow hmac_md5
+#endif /* CONFIG_FIPS */
#endif /* MD5_H */