Commit 6175ca2b authored by Milan Broz's avatar Milan Broz Committed by Herbert Xu

crypto: testmgr - Allow ecb(cipher_null) in FIPS mode

The cipher_null is not a real cipher, FIPS mode should not restrict its use.

It is used for several tests (for example in cryptsetup testsuite) and also
temporarily for reencryption of not yet encrypted device in cryptsetup-reencrypt tool.

Problem is easily reproducible with
  cryptsetup benchmark -c null
Signed-off-by: default avatarMilan Broz <gmazyland@gmail.com>
Acked-by: default avatarStephan Müller <smueller@chronox.de>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
parent 899f35fa
...@@ -2910,6 +2910,7 @@ static const struct alg_test_desc alg_test_descs[] = { ...@@ -2910,6 +2910,7 @@ static const struct alg_test_desc alg_test_descs[] = {
}, { }, {
.alg = "ecb(cipher_null)", .alg = "ecb(cipher_null)",
.test = alg_test_null, .test = alg_test_null,
.fips_allowed = 1,
}, { }, {
.alg = "ecb(des)", .alg = "ecb(des)",
.test = alg_test_skcipher, .test = alg_test_skcipher,
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment