]> www.infradead.org Git - users/jedix/linux-maple.git/commit
crypto: FIPS - allow tests to be disabled in FIPS mode
authorStephan Mueller <smueller@chronox.de>
Thu, 25 Aug 2016 13:15:01 +0000 (15:15 +0200)
committerJack Vogel <jack.vogel@oracle.com>
Thu, 5 Apr 2018 20:11:43 +0000 (13:11 -0700)
commit1c22db27f279b26afa4c421929b70127275cdf9b
tree29ed697ffd340f8d1058b1d350aaa4a7857ccf31
parent77dafd4a08a08b4572d9a7e3f00e41f927a3a162
crypto: FIPS - allow tests to be disabled in FIPS mode

In FIPS mode, additional restrictions may apply. If these restrictions
are violated, the kernel will panic(). This patch allows test vectors
for symmetric ciphers to be marked as to be skipped in FIPS mode.

Together with the patch, the XTS test vectors where the AES key is
identical to the tweak key is disabled in FIPS mode. This test vector
violates the FIPS requirement that both keys must be different.

Reported-by: Tapas Sarangi <TSarangi@trustwave.com>
Signed-off-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
(cherry picked from commit 10faa8c0d6c3b22466f97713a9533824a2ea1c57)

Orabug: 27809271

Signed-off-by: John Haxby <john.haxby@oracle.com>
Reviewed-by: HÃ¥kon Bugge <haakon.bugge@oracle.com>
Conflicts:
crypto/testmgr.h
crypto/testmgr.c
crypto/testmgr.h