From 5389ed0aeb97b290969f923b205e333d4f85fdc3 Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Tue, 15 Jul 2025 12:32:14 -0400 Subject: [PATCH] Temporarily disable SLH-DSA FIPS self-tests Signed-off-by: Simo Sorce --- providers/fips/self_test_data.inc | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/providers/fips/self_test_data.inc b/providers/fips/self_test_data.inc index f3059a8446..e924e93018 100644 --- a/providers/fips/self_test_data.inc +++ b/providers/fips/self_test_data.inc @@ -2862,6 +2862,7 @@ static const ST_KAT_PARAM ml_dsa_sig_init[] = { }; #endif /* OPENSSL_NO_ML_DSA */ +#if 0 /* Temporarily disable SLH-DSA self tests due to performance issues */ #ifndef OPENSSL_NO_SLH_DSA /* * Deterministic SLH_DSA key generation supplies the private key elements and @@ -2952,6 +2953,7 @@ static const unsigned char slh_dsa_shake_128f_sig_digest[] = { 0x89, 0x77, 0x00, 0x72, 0x03, 0x92, 0xd1, 0xa6, }; #endif /* OPENSSL_NO_SLH_DSA */ +#endif /* Temporarily disable SLH-DSA self tests due to performance issues */ /* Hash DRBG inputs for signature KATs */ static const unsigned char sig_kat_entropyin[] = { @@ -3051,6 +3053,7 @@ static const ST_KAT_SIGN st_kat_sign_tests[] = { ml_dsa_sig_init }, #endif /* OPENSSL_NO_ML_DSA */ +#if 0 /* Temporarily disable SLH-DSA self tests due to performance issues */ #ifndef OPENSSL_NO_SLH_DSA /* * FIPS 140-3 IG 10.3.A.16 Note 29 says: @@ -3081,6 +3084,7 @@ static const ST_KAT_SIGN st_kat_sign_tests[] = { slh_dsa_sig_params, slh_dsa_sig_params }, #endif /* OPENSSL_NO_SLH_DSA */ +#endif /* Temporarily disable SLH-DSA self tests due to performance issues */ }; #if !defined(OPENSSL_NO_ML_DSA) @@ -3485,6 +3489,7 @@ static const ST_KAT_ASYM_KEYGEN st_kat_asym_keygen_tests[] = { ml_dsa_key }, # endif +#if 0 /* Temporarily disable SLH-DSA self tests due to performance issues */ # if !defined(OPENSSL_NO_SLH_DSA) { OSSL_SELF_TEST_DESC_KEYGEN_SLH_DSA, @@ -3493,5 +3498,6 @@ static const ST_KAT_ASYM_KEYGEN st_kat_asym_keygen_tests[] = { slh_dsa_128f_keygen_expected_params }, # endif +#endif /* Temporarily disable SLH-DSA self tests due to performance issues */ }; #endif /* !OPENSSL_NO_ML_DSA || !OPENSSL_NO_SLH_DSA */ -- 2.50.1