Hi Herbert, do I understand the crypto code correctly, that although crypto/testmgr.c in alg_test() returns -EINVAL for non-fips allowed algorithms (that means failing crypto API test) the API in crypto_alg_lookup() returns -ELIBBAD for failed test? Why ELIBBAD and not ENOENT like for missing ciphers? To distinguish between missing cipher and disabled one due fips? Kind regards, Petr