diff options
| author | Nicolai Stange <[email protected]> | 2021-11-30 14:10:07 +0000 |
|---|---|---|
| committer | Herbert Xu <[email protected]> | 2021-12-11 05:48:06 +0000 |
| commit | 8f7977284331d0b0f210efa98a5d3fdcb2a65dd3 (patch) | |
| tree | dd5846abbb8c8aab2834c91604e2c75d329bed0f /drivers/crypto/stm32/stm32-hash.c | |
| parent | crypto: stm32/cryp - reorder hw initialization (diff) | |
| download | kernel-8f7977284331d0b0f210efa98a5d3fdcb2a65dd3.tar.gz kernel-8f7977284331d0b0f210efa98a5d3fdcb2a65dd3.zip | |
crypto: drbg - ignore jitterentropy errors if not in FIPS mode
A subsequent patch will make the jitterentropy RNG to unconditionally
report health test errors back to callers, independent of whether
fips_enabled is set or not. The DRBG needs access to a functional
jitterentropy instance only in FIPS mode (because it's the only SP800-90B
compliant entropy source as it currently stands). Thus, it is perfectly
fine for the DRBGs to obtain entropy from the jitterentropy source only
on a best effort basis if fips_enabled is off.
Make the DRBGs to ignore jitterentropy failures if fips_enabled is not set.
Signed-off-by: Nicolai Stange <[email protected]>
Reviewed-by: Stephan Mueller <[email protected]>
Signed-off-by: Herbert Xu <[email protected]>
Diffstat (limited to 'drivers/crypto/stm32/stm32-hash.c')
0 files changed, 0 insertions, 0 deletions