#3 Add HashVerifyPKCS1v15 function
Merged by deparker. Opened by tstellar.
tstellar/go go1.12-hash-verify-pkcs1v15  into  go1.12-openssl-fips

Download 3.patch

Also revert the implementation of VerifyPKCS1v15() back to the old behavior of
assuming hashed inputs. This was done to support exisiting applications even
though it makes the implementation no longer FIPS compliant.

Setting the enviroinment variable GOLANG_STRICT_FIPS=1 will cause calls to
VerifyPKCS1v15() to panic and can be used to test if an application is
complying with FIPS.

HashVerifyPKCS1v15 should be used instead of VerifyPKCS1v15 in order to comply with
FIPS requirements.

rebased onto 567229bba9488b08eb6d23ed3830ee2634575dda

rebased onto 4068b481a6edb71529c5ab24ac6d18c720f0637a

rebased onto c4b50093d9116a9651dae911021cabf9e99f7933

Pull-Request has been merged by deparker

Metadata