From f7f4e84cd36ba59a26efcdd45c36d9b997eb385c Mon Sep 17 00:00:00 2001
From: Andrew Hutchings <andrew@linuxjedi.co.uk>
Date: Wed, 1 Oct 2025 15:01:51 +0100
Subject: [PATCH] Fix SHA512 truncated forms

The truncated forms of SHA512 were being included even if SHA512 was not
defined. This led to build issues when there was no SHA512.
---
 src/crypto.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/crypto.c b/src/crypto.c
index cc924331..80cabea7 100644
--- a/src/crypto.c
+++ b/src/crypto.c
@@ -6411,7 +6411,6 @@ CK_RV C_GenerateKey(CK_SESSION_HANDLE hSession,
                 case CKP_PKCS5_PBKD2_HMAC_SHA512:
                     hashType = WC_SHA512;
                     break;
-#endif
 #ifndef WOLFSSL_NOSHA512_224
                 case CKP_PKCS5_PBKD2_HMAC_SHA512_224:
                     hashType = WC_SHA512_224;
@@ -6421,6 +6420,7 @@ CK_RV C_GenerateKey(CK_SESSION_HANDLE hSession,
                 case CKP_PKCS5_PBKD2_HMAC_SHA512_256:
                     hashType = WC_SHA512_256;
                     break;
+#endif
 #endif
                 default:
                     return CKR_MECHANISM_PARAM_INVALID;