From d68ca5ca2945159b658e2e786640a4c693cfa603 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tobias=20Nie=C3=9Fen?= Date: Sun, 18 May 2025 13:59:47 +0100 Subject: [PATCH] test: do not skip OCB decryption in FIPS mode I believe that OCB should work in FIPS mode, and only CCM should be skipped here. --- test/parallel/test-crypto-authenticated.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/test/parallel/test-crypto-authenticated.js b/test/parallel/test-crypto-authenticated.js index 1fc7409c47dd55..a97911de983021 100644 --- a/test/parallel/test-crypto-authenticated.js +++ b/test/parallel/test-crypto-authenticated.js @@ -304,7 +304,7 @@ for (const test of TEST_CASES) { } // Test that create(De|C)ipheriv throws if the mode is CCM or OCB and no -// authentication tag has been specified. +// authentication tag length has been specified. { for (const mode of ['ccm', 'ocb']) { assert.throws(() => { @@ -316,7 +316,7 @@ for (const test of TEST_CASES) { }); // CCM decryption is unsupported in FIPS mode. - if (!isFipsEnabled) { + if (!isFipsEnabled || mode !== 'ccm') { assert.throws(() => { crypto.createDecipheriv(`aes-256-${mode}`, 'FxLKsqdmv0E9xrQhp0b1ZgI0K7JFZJM8',