]> git.karo-electronics.de Git - linux-beck.git/commit
crypto: testmgr - Mark algs allowed in fips mode
authorJarod Wilson <jarod@redhat.com>
Fri, 15 May 2009 05:16:03 +0000 (15:16 +1000)
committerHerbert Xu <herbert@gondor.apana.org.au>
Tue, 2 Jun 2009 04:04:48 +0000 (14:04 +1000)
commita1915d51e8e7ee192d2101d621d425379088cbb0
tree2e07e1e3dafce0bc4b5fb98c79df92754b272284
parentf7cb80f2b9fa06730be20d17c80b12e511a36c1c
crypto: testmgr - Mark algs allowed in fips mode

Set the fips_allowed flag in testmgr.c's alg_test_descs[] for algs
that are allowed to be used when in fips mode.

One caveat: des isn't actually allowed anymore, but des (and thus also
ecb(des)) has to be permitted, because disallowing them results in
des3_ede being unable to properly register (see des module init func).

Also, crc32 isn't technically on the fips approved list, but I think
it gets used in various places that necessitate it being allowed.

This list is based on
http://csrc.nist.gov/groups/STM/cavp/index.html

Important note: allowed/approved here does NOT mean "validated", just
that its an alg that *could* be validated.

Signed-off-by: Jarod Wilson <jarod@redhat.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/testmgr.c