Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove unnecessary test dependencies on RSA-512 #11444

Merged
merged 2 commits into from
Aug 17, 2024
Merged

Conversation

davidben
Copy link
Contributor

test_unsupported_hash and test_prehashed_digest_mismatch work just fine with realistic RSA key sizes. (They also, as written, silently test nothing when the backend rejects RSA-512. As a reminder, RSA-512 was broken since 1999.)

test_rsa_fips_small_key wants a small key, but I assume RSA-1024 is fine.

test_unsupported_hash and test_prehashed_digest_mismatch work just fine
with realistic RSA key sizes. (They also, as written, silently test
nothing when the backend rejects RSA-512. As a reminder, RSA-512 was
broken since 1999.)

test_rsa_fips_small_key wants a small key, but I assume RSA-1024 is
fine.
alex
alex previously approved these changes Aug 17, 2024
@alex
Copy link
Member

alex commented Aug 17, 2024

... the RHEL-8 in FIPS mode is apparently ok with a 1024-bit RSA key? I quit.

@davidben
Copy link
Contributor Author

Amazing. Restored that one.

@alex alex merged commit c2aad20 into pyca:main Aug 17, 2024
59 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants