Aydın MercanandMichal Nowak
8d093a6b66
FIPS 186-5 [1] allows the usage deterministic ECDSA (Section 6.3) which is compabile with RFC 6979 [2] but OpenSSL seems to follow FIPS 186-4 (Section 6.3) [3] which only allows for random k values, failing k value generation for OpenSSL >=3.2. [4] Fix signing by not using deterministic ECDSA when FIPS mode is active. [1]: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf [2]: https://datatracker.ietf.org/doc/html/rfc6979 [3]: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf [4]: https://github.com/openssl/openssl/blob/85f17585b0d8b55b335f561e2862db14a20b1e64/crypto/ec/ecdsa_ossl.c#L201-L207