|
|
|
Re: [PATCH] crypto: allow aesni-intel and ghash_clmulni-intel in fips mode | |
| [Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] | |
On Fri, Jun 29, 2012 at 10:08:09PM +0200, Milan Broz wrote: > Patch 863b557a88f8c033f7419fabafef4712a5055f85 added NULL entries > for intel accelerated drivers but did not marked these fips allowed. > This cause panic if running tests with fips=1. > > For ghash, fips_allowed flag was added in patch > 18c0ebd2d8194cce4b3f67e2903fa01bea892cbc. > > Without patch, "modprobe tcrypt" fails with > alg: skcipher: Failed to load transform for cbc-aes-aesni: -2 > cbc-aes-aesni: cbc(aes) alg self test failed in fips mode! > (panic) > > Also add missing cryptd(__driver-cbc-aes-aesni) and > cryptd(__driver-gcm-aes-aesni) test to complement > null tests above, otherwise system complains with > alg: No test for __cbc-aes-aesni (cryptd(__driver-cbc-aes-aesni)) > alg: No test for __gcm-aes-aesni (cryptd(__driver-gcm-aes-aesni)) > > Signed-off-by: Milan Broz <mbroz@xxxxxxxxxx> > Signed-off-by: Paul Wouters <pwouters@xxxxxxxxxx> Patch applied. Thanks! -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html