Disable some ciphers

microsoft · Oct 30, 2023 · db320cb · db320cb
1 parent 661dd13
commit db320cb
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/CryptoPkg/Library/OpensslLib/OpensslStub/uefiprov.c b/CryptoPkg/Library/OpensslLib/OpensslStub/uefiprov.c
@@ -128,7 +128,7 @@ static const OSSL_ALGORITHM deflt_digests[] = {
     { NULL, NULL, NULL }
 };
 // MU_CHANGE START
-static const OSSL_ALGORITHM_CAPABLE deflt_ciphers[] = {
+/*static const OSSL_ALGORITHM_CAPABLE deflt_ciphers[] = {
     ALG(PROV_NAMES_NULL, ossl_null_functions),
     ALG(PROV_NAMES_AES_256_ECB, ossl_aes256ecb_functions),
     ALG(PROV_NAMES_AES_192_ECB, ossl_aes192ecb_functions),
@@ -147,7 +147,7 @@ static const OSSL_ALGORITHM_CAPABLE deflt_ciphers[] = {
 
     { { NULL, NULL, NULL }, NULL }
 };
-static OSSL_ALGORITHM exported_ciphers[OSSL_NELEM(deflt_ciphers)];
+static OSSL_ALGORITHM exported_ciphers[OSSL_NELEM(deflt_ciphers)];*/
 // MU_CHANGE END
 
 static const OSSL_ALGORITHM deflt_macs[] = {
@@ -242,8 +242,8 @@ static const OSSL_ALGORITHM *deflt_query(void *provctx, int operation_id,
         return deflt_digests;
     case OSSL_OP_CIPHER:
         // MU_CHANGE START
-        return exported_ciphers;
-        //return NULL;
+        //return exported_ciphers;
+        return NULL;
         // MU_CHANGE END
     case OSSL_OP_MAC:
         return deflt_macs;
@@ -337,7 +337,7 @@ int ossl_uefi_provider_init(const OSSL_CORE_HANDLE *handle,
 
     *out = deflt_dispatch_table;
     // MU_CHANGE START
-    ossl_prov_cache_exported_algorithms(deflt_ciphers, exported_ciphers);
+    //ossl_prov_cache_exported_algorithms(deflt_ciphers, exported_ciphers);
     // MU_CHANGE END
 
     return 1;