Add fips check when checking for root key encryption

Signed-off-by: Umayr Shahid <[email protected]>

cryptoservice/crypto_service.go

@@ -173,6 +173,13 @@ func CheckRootKeyIsEncrypted(pemBytes []byte) error {
 		return ErrNoValidPrivateKey
 	}
 
+	if notary.FIPSEnabled {
+		if block.Type == "PRIVATE ENCRYPTED KEY" {
+			return nil
+		}
+		return ErrRootKeyNotEncrypted
+	}
+
 	if !x509.IsEncryptedPEMBlock(block) {
 		return ErrRootKeyNotEncrypted
 	}