File libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch of Package libgcrypt.39215

Index: libgcrypt-1.9.4/cipher/ecc.c
===================================================================
--- libgcrypt-1.9.4.orig/cipher/ecc.c
+++ libgcrypt-1.9.4/cipher/ecc.c
@@ -259,7 +259,10 @@ nist_generate_key (mpi_ec_t ec, int flag
   else
     {
       if (test_keys (ec, ec->nbits - 64))
-        return GPG_ERR_BAD_SIGNATURE;
+        {
+          fips_signal_error ("self-test after key generation failed");
+          return GPG_ERR_BAD_SIGNATURE;
+        }
     }
   return 0;
 }
openSUSE Build Service is sponsored by