Re: [PATCH] crypto: allow aesni-intel and ghash_clmulni-intel in fips mode

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Jun 29, 2012 at 10:08:09PM +0200, Milan Broz wrote:
> Patch 863b557a88f8c033f7419fabafef4712a5055f85 added NULL entries
> for intel accelerated drivers but did not marked these fips allowed.
> This cause panic if running tests with fips=1.
> 
> For ghash, fips_allowed flag was added in patch
> 18c0ebd2d8194cce4b3f67e2903fa01bea892cbc.
> 
> Without patch, "modprobe tcrypt" fails with
>   alg: skcipher: Failed to load transform for cbc-aes-aesni: -2
>   cbc-aes-aesni: cbc(aes) alg self test failed in fips mode!
>   (panic)
> 
> Also add missing cryptd(__driver-cbc-aes-aesni) and
> cryptd(__driver-gcm-aes-aesni) test to complement
> null tests above, otherwise system complains with
>   alg: No test for __cbc-aes-aesni (cryptd(__driver-cbc-aes-aesni))
>   alg: No test for __gcm-aes-aesni (cryptd(__driver-gcm-aes-aesni))
> 
> Signed-off-by: Milan Broz <mbroz@xxxxxxxxxx>
> Signed-off-by: Paul Wouters <pwouters@xxxxxxxxxx>

Patch applied.  Thanks!
-- 
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Kernel]     [Gnu Classpath]     [Gnu Crypto]     [DM Crypt]     [Netfilter]     [Bugtraq]

  Powered by Linux