From 19671faf2e7426ba341e35ab46788bf26d3bd315 Mon Sep 17 00:00:00 2001 From: Gerardo Ravago Date: Thu, 13 Jun 2024 15:31:21 -0400 Subject: [PATCH] AWS-LC-FIPS-2.0.12 release preparation (#1635) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ### Issues: Resolves V1399146249 ### Description of changes: Describe AWS-LC’s current behavior and how your code changes that behavior. If there are no issues this pr is resolving, explain why this change is necessary. * [Backport] Prevent non-constant-time code in Kyber-R3 implementation by @geedo0 in https://github.com/aws/aws-lc/pull/1632 By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license. --- crypto/fipsmodule/service_indicator/service_indicator_test.cc | 4 ++-- include/openssl/base.h | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/crypto/fipsmodule/service_indicator/service_indicator_test.cc b/crypto/fipsmodule/service_indicator/service_indicator_test.cc index 2e37d9b582..e3175ebde7 100644 --- a/crypto/fipsmodule/service_indicator/service_indicator_test.cc +++ b/crypto/fipsmodule/service_indicator/service_indicator_test.cc @@ -4051,7 +4051,7 @@ TEST(ServiceIndicatorTest, DRBG) { // Since this is running in FIPS mode it should end in FIPS // Update this when the AWS-LC version number is modified TEST(ServiceIndicatorTest, AWSLCVersionString) { - ASSERT_STREQ(awslc_version_string(), "AWS-LC FIPS 2.0.11"); + ASSERT_STREQ(awslc_version_string(), "AWS-LC FIPS 2.0.12"); } #else @@ -4094,6 +4094,6 @@ TEST(ServiceIndicatorTest, BasicTest) { // Since this is not running in FIPS mode it shouldn't end in FIPS // Update this when the AWS-LC version number is modified TEST(ServiceIndicatorTest, AWSLCVersionString) { - ASSERT_STREQ(awslc_version_string(), "AWS-LC 2.0.11"); + ASSERT_STREQ(awslc_version_string(), "AWS-LC 2.0.12"); } #endif // AWSLC_FIPS diff --git a/include/openssl/base.h b/include/openssl/base.h index 1510a5af7d..07afb7dde1 100644 --- a/include/openssl/base.h +++ b/include/openssl/base.h @@ -214,7 +214,7 @@ extern "C" { // ServiceIndicatorTest.AWSLCVersionString // Note: there are two versions of this test. Only one test is compiled // depending on FIPS mode. -#define AWSLC_VERSION_NUMBER_STRING "2.0.11" +#define AWSLC_VERSION_NUMBER_STRING "2.0.12" #if defined(BORINGSSL_SHARED_LIBRARY)