| commit | ccb778e1841ce04b4c10b39f0dd2558ab2c6dcd4 | |
| author | Neil Horman <nhorman@tuxdriver.com> | |
| Tue, 5 Aug 2008 06:13:08 +0000 (5 14:13 +0800) | ||
| committer | Herbert Xu <herbert@gondor.apana.org.au> | |
| Fri, 29 Aug 2008 05:50:02 +0000 (29 15:50 +1000) | ||
| tree | d15c704e38e731391fdb8bf8db1922aff893acd7 | treesnapshot (tar.gz zip) |
| parent | 5be5e667a9a5d8d5553e009e67bc692d95e5916a | commitdiff |
crypto: api - Add fips_enable flag
Add the ability to turn FIPS-compliant mode on or off at boot
In order to be FIPS compliant, several check may need to be preformed that may
be construed as unusefull in a non-compliant mode. This patch allows us to set
a kernel flag incating that we are running in a fips-compliant mode from boot
up. It also exports that mode information to user space via a sysctl
(/proc/sys/crypto/fips_enabled).
Tested successfully by me.
Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Add the ability to turn FIPS-compliant mode on or off at boot
In order to be FIPS compliant, several check may need to be preformed that may
be construed as unusefull in a non-compliant mode. This patch allows us to set
a kernel flag incating that we are running in a fips-compliant mode from boot
up. It also exports that mode information to user space via a sysctl
(/proc/sys/crypto/fips_enabled).
Tested successfully by me.
Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
| crypto/Kconfig | diffblobblamehistory | |
| crypto/Makefile | diffblobblamehistory | |
| crypto/fips.c | [new file with mode: 0644] | blob |
| crypto/internal.h | diffblobblamehistory | |
| crypto/proc.c | diffblobblamehistory |