tree 9d3f452092d5f42e626c87c44d4ff6df1ddbf2aa
parent 235ceebabf4757382045f9420b1dd7b339973877
author Pete Bentley <prb@google.com> 1655382938 +0100
committer Pete Bentley <prb@google.com> 1655472632 +0000

external/boringssl: Sync upstream branch fips-20220613

*** Notes for Cherry-Pick to tm-dev:
See b/233873228#comment10 for the reasoning behind this late breaking change.

This change needs to go into tm-dev before FRC to ensure libcrypto in /system is built from the version we certify.

The FRC module train is due to be completely respun next week so it will also go into the FCS modules version of libcrypto. *However* as there are no API, ABI, functional or test expectation changes there is no urgency to getting the change into the Mainline train, so we just need to ensure all modules that bundle libcrypto board a Mainline train before the certification process moves on to NIST evaluation.

*** Original change description follows

Final FIPS changes for 2022.

The upstream branch being merged contains cherry-picks of
changes needed for FIPS certification plus a couple of critical
bug fixes.  No API or ABI changes. No functional changes.

Those changes are also in the main upstream branch, so won't
be overwritten by the next routine rollup with do using our
UPDATING script.

Includes the following changes:
* Add an extra reduction step to the end of RSAZ.
* Always end BN_mod_exp_mont_consttime with normal Montgomery
reduction.
* More includes for builds that don't use bcm.c
* Add some more includes.
* Increase ACVP sizes.
* Move digestsign.c into the module.

Bug: 233873228
Test: atest CtsLibcoreTestCases CtsLibcoreOkHttpTestCases
Change-Id: I1d41a5d6f51af818253b55b8b99e0e73ea6e24ba
Merged-In: I1d41a5d6f51af818253b55b8b99e0e73ea6e24ba
(cherry picked from commit abd455b494b016109d2bfd1ca7a29619fb4c35a3)