diff options
author | Jarod Wilson <jarod@redhat.com> | 2009-05-15 15:16:03 +1000 |
---|---|---|
committer | Herbert Xu <herbert@gondor.apana.org.au> | 2009-06-02 14:04:48 +1000 |
commit | a1915d51e8e7ee192d2101d621d425379088cbb0 (patch) | |
tree | 2e07e1e3dafce0bc4b5fb98c79df92754b272284 /crypto/tcrypt.h | |
parent | f7cb80f2b9fa06730be20d17c80b12e511a36c1c (diff) | |
download | op-kernel-dev-a1915d51e8e7ee192d2101d621d425379088cbb0.zip op-kernel-dev-a1915d51e8e7ee192d2101d621d425379088cbb0.tar.gz |
crypto: testmgr - Mark algs allowed in fips mode
Set the fips_allowed flag in testmgr.c's alg_test_descs[] for algs
that are allowed to be used when in fips mode.
One caveat: des isn't actually allowed anymore, but des (and thus also
ecb(des)) has to be permitted, because disallowing them results in
des3_ede being unable to properly register (see des module init func).
Also, crc32 isn't technically on the fips approved list, but I think
it gets used in various places that necessitate it being allowed.
This list is based on
http://csrc.nist.gov/groups/STM/cavp/index.html
Important note: allowed/approved here does NOT mean "validated", just
that its an alg that *could* be validated.
Signed-off-by: Jarod Wilson <jarod@redhat.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'crypto/tcrypt.h')
0 files changed, 0 insertions, 0 deletions