diff mbox series

crypto: testmgr - Disable raw RSA in FIPS mode

Message ID Y+NrB5q1VcIIa+jk@gondor.apana.org.au
State New
Headers show
Series crypto: testmgr - Disable raw RSA in FIPS mode | expand

Commit Message

Herbert Xu Feb. 8, 2023, 9:27 a.m. UTC 
As FIPS is only able to verify the compliance of pkcs1pad the
underlying "rsa" algorithm should not be marked as fips_allowed.

Reported-by: Clemens Lang <cllang@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

Comments

Herbert Xu Feb. 14, 2023, 1:26 a.m. UTC | #1 
On Thu, Feb 09, 2023 at 04:33:34PM +0100, Ondrej Mosnacek wrote:
>
> Seems to work as expected - with the patch I get the following lines
> in the kernel console (in FIPS MODE:

Thanks for checking Ondrej!

As Clemens informed me that this patch is no longer needed I'm
withdrawing it for now.

Cheers,
diff mbox series

Patch

diff --git a/crypto/testmgr.c b/crypto/testmgr.c
index dd748832ed4a..6fbb56c6bd4c 100644
--- a/crypto/testmgr.c
+++ b/crypto/testmgr.c
@@ -5467,7 +5467,6 @@  static const struct alg_test_desc alg_test_descs[] = {
 	}, {
 		.alg = "rsa",
 		.test = alg_test_akcipher,
-		.fips_allowed = 1,
 		.suite = {
 			.akcipher = __VECS(rsa_tv_template)
 		}