|
@@ -28,7 +28,7 @@ int rsa_get_n(void *context, size_t hdrlen, unsigned char tag,
|
|
|
return -ENOMEM;
|
|
|
|
|
|
/* In FIPS mode only allow key size 2K & 3K */
|
|
|
- if (fips_enabled && (mpi_get_size(key->n) != 256 ||
|
|
|
+ if (fips_enabled && (mpi_get_size(key->n) != 256 &&
|
|
|
mpi_get_size(key->n) != 384)) {
|
|
|
pr_err("RSA: key size not allowed in FIPS mode\n");
|
|
|
mpi_free(key->n);
|
|
@@ -62,7 +62,7 @@ int rsa_get_d(void *context, size_t hdrlen, unsigned char tag,
|
|
|
return -ENOMEM;
|
|
|
|
|
|
/* In FIPS mode only allow key size 2K & 3K */
|
|
|
- if (fips_enabled && (mpi_get_size(key->d) != 256 ||
|
|
|
+ if (fips_enabled && (mpi_get_size(key->d) != 256 &&
|
|
|
mpi_get_size(key->d) != 384)) {
|
|
|
pr_err("RSA: key size not allowed in FIPS mode\n");
|
|
|
mpi_free(key->d);
|