File libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch of Package libgcrypt.39215
Index: libgcrypt-1.9.4/cipher/ecc.c
===================================================================
--- libgcrypt-1.9.4.orig/cipher/ecc.c
+++ libgcrypt-1.9.4/cipher/ecc.c
@@ -259,7 +259,10 @@ nist_generate_key (mpi_ec_t ec, int flag
else
{
if (test_keys (ec, ec->nbits - 64))
- return GPG_ERR_BAD_SIGNATURE;
+ {
+ fips_signal_error ("self-test after key generation failed");
+ return GPG_ERR_BAD_SIGNATURE;
+ }
}
return 0;
}