summaryrefslogtreecommitdiffstats
path: root/crypto/af_alg.c
diff options
context:
space:
mode:
authorStephan Mueller <smueller@chronox.de>2014-12-05 22:40:21 +0100
committerHerbert Xu <herbert@gondor.apana.org.au>2014-12-22 23:02:37 +1100
commit905b42e559fa4952569b3444bc6c054c0103e5a0 (patch)
treeccb4a45d70686fea9c0f104a6e43cf33fcffae73 /crypto/af_alg.c
parent0efcb8d5b2f7af86818179810cc080b326a83e19 (diff)
downloadop-kernel-dev-905b42e559fa4952569b3444bc6c054c0103e5a0.zip
op-kernel-dev-905b42e559fa4952569b3444bc6c054c0103e5a0.tar.gz
crypto: drbg - panic on continuous self test error
This patch adds a panic if the FIPS 140-2 self test error failed. Note, that entire code is only executed with fips_enabled (i.e. when the kernel is booted with fips=1. It is therefore not executed for 99.9% of all user base. As mathematically such failure cannot occur, this panic should never be triggered. But to comply with NISTs current requirements, an endless loop must be replaced with the panic. When the new version of FIPS 140 will be released, this entire continuous self test function will be ripped out as it will not be needed any more. This patch is functionally equivalent as implemented in ansi_cprng.c and drivers/char/random.c. Signed-off-by: Stephan Mueller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'crypto/af_alg.c')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud