Skip to content

Commit 7cc42d4

Browse files
author
Andras Fekete
committed
Update the true minimum ECC key size default
The discrepancy shows up when trying to compile with FIPS
1 parent e340e41 commit 7cc42d4

1 file changed

Lines changed: 9 additions & 2 deletions

File tree

configure.ac

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3979,9 +3979,16 @@ fi
39793979

39803980
# ECC Minimum Key Size
39813981
AC_ARG_WITH([eccminsz],
3982-
[AS_HELP_STRING([--with-eccminsz=BITS],[Sets the ECC minimum key size (default: 224 bits)])],
3982+
[AS_HELP_STRING([--with-eccminsz=BITS],[Sets the ECC minimum key size (default: 224 bits non-FIPS / 192 bits with FIPS)])],
39833983
[ ENABLED_ECCMINSZ=$withval ],
3984-
[ ENABLED_ECCMINSZ=224 ]
3984+
[
3985+
if test "x$ENABLED_FIPS" = "xno"
3986+
then
3987+
ENABLED_ECCMINSZ=224
3988+
else
3989+
ENABLED_ECCMINSZ=192
3990+
fi
3991+
]
39853992
)
39863993
AM_CFLAGS="$AM_CFLAGS -DECC_MIN_KEY_SZ=$ENABLED_ECCMINSZ"
39873994

0 commit comments

Comments
 (0)