renegade-project/linux-next
2
0
Fork 0
mirror of https://github.com/edk2-porting/linux-next.git synced 2024-12-04 03:14:02 +08:00
Code

crypto: drbg - update FIPS CTR self-checks to aes256

Browse Source 
When originally drbg was introduced FIPS self-checks for all types but
CTR were using the most preferred parameters for each type of
DRBG. Update CTR self-check to use aes256.

This patch updates code from 541af946fe ("crypto: drbg - SP800-90A
Deterministic Random Bit Generator"), but is not interesting to
cherry-pick for stable updates, because it doesn't affect regular
builds, nor has any tangible effect on FIPS certifcation.

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
Reviewed-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
This commit is contained in:
Dimitri John Ledkov 2023-10-30 14:05:14 +02:00 committed by Herbert Xu
parent 7ee44f1b59
commit a9dc629886
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
crypto/drbg.c
View File

@ -1478,8 +1478,8 @@ static int drbg_generate(struct drbg_state *drbg,
err = alg_test("drbg_pr_hmac_sha256", err = alg_test("drbg_pr_hmac_sha256",
"drbg_pr_hmac_sha256", 0, 0); "drbg_pr_hmac_sha256", 0, 0);
else if (drbg->core->flags & DRBG_CTR) else if (drbg->core->flags & DRBG_CTR)
err = alg_test("drbg_pr_ctr_aes128", err = alg_test("drbg_pr_ctr_aes256",
"drbg_pr_ctr_aes128", 0, 0); "drbg_pr_ctr_aes256", 0, 0);
else else
err = alg_test("drbg_pr_sha256", err = alg_test("drbg_pr_sha256",
"drbg_pr_sha256", 0, 0); "drbg_pr_sha256", 0, 0);
@ -2017,7 +2017,7 @@ static inline int __init drbg_healthcheck_sanity(void)
return 0; return 0;
#ifdef CONFIG_CRYPTO_DRBG_CTR #ifdef CONFIG_CRYPTO_DRBG_CTR
drbg_convert_tfm_core("drbg_nopr_ctr_aes128", &coreref, &pr); drbg_convert_tfm_core("drbg_nopr_ctr_aes256", &coreref, &pr);
#endif #endif
#ifdef CONFIG_CRYPTO_DRBG_HASH #ifdef CONFIG_CRYPTO_DRBG_HASH
drbg_convert_tfm_core("drbg_nopr_sha256", &coreref, &pr); drbg_convert_tfm_core("drbg_nopr_sha256", &coreref, &pr);