From 1b990bfd5ccb187e60f0c29b3bf115c7e8bdc15a Mon Sep 17 00:00:00 2001 From: Derek Parker Date: Fri, 1 Mar 2024 13:33:26 -0800 Subject: [PATCH] crypto/rsa: skip overlong message test in FIPS mode --- src/crypto/rsa/pkcs1v15_test.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/crypto/rsa/pkcs1v15_test.go b/src/crypto/rsa/pkcs1v15_test.go index a4f2e2dbbe4..6d42066afd7 100644 --- a/src/crypto/rsa/pkcs1v15_test.go +++ b/src/crypto/rsa/pkcs1v15_test.go @@ -237,6 +237,10 @@ func TestHashVerifyPKCS1v15(t *testing.T) { } func TestOverlongMessagePKCS1v15(t *testing.T) { + // OpenSSL now returns a random string instead of an error + if boring.Enabled() { + t.Skip("Not relevant in boring mode") + } ciphertext := decodeBase64("fjOVdirUzFoLlukv80dBllMLjXythIf22feqPrNo0YoIjzyzyoMFiLjAc/Y4krkeZ11XFThIrEvw\nkRiZcCq5ng==") _, err := DecryptPKCS1v15(nil, rsaPrivateKey, ciphertext) if err == nil {