Skip to content

Commit 7c1562f

Browse files
SeWittSiemensmergify[bot]
authored andcommitted
CryptoPkg: Add HMAC algorithms for signature/keymgmt
Some parts and versions of TLS require HMAC. This adds the missing HMAC algorithms to the UEFI provider. One entry in the default signature algorithms and one in the key management algorithms. Source of these entries is the default OpenSSL provider, defltprov.c, included in the OpenSSL library. This change was required to connect to some TLS servers depending on the used ciphers. Signed-off-by: Sebastian Witt <sebastian.witt@siemens.com>
1 parent 8b87eb9 commit 7c1562f

File tree

1 file changed

+3
-0
lines changed
  • CryptoPkg/Library/OpensslLib/OpensslStub

1 file changed

+3
-0
lines changed

CryptoPkg/Library/OpensslLib/OpensslStub/uefiprov.c

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -193,6 +193,7 @@ static const OSSL_ALGORITHM deflt_signature[] = {
193193
#ifndef OPENSSL_NO_EC
194194
{ PROV_NAMES_ECDSA, "provider=default", ossl_ecdsa_signature_functions },
195195
#endif
196+
{ PROV_NAMES_HMAC, "provider=default", ossl_mac_legacy_hmac_signature_functions },
196197

197198
{ NULL, NULL, NULL }
198199
};
@@ -222,6 +223,8 @@ static const OSSL_ALGORITHM deflt_keymgmt[] = {
222223
PROV_DESCS_TLS1_PRF_SIGN },
223224
{ PROV_NAMES_HKDF, "provider=default", ossl_kdf_keymgmt_functions,
224225
PROV_DESCS_HKDF_SIGN },
226+
{ PROV_NAMES_HMAC, "provider=default", ossl_mac_legacy_keymgmt_functions,
227+
PROV_DESCS_HMAC_SIGN },
225228

226229
{ NULL, NULL, NULL }
227230
};

0 commit comments

Comments
 (0)