提交 c27b2d20 编写于 作者: N Nicolai Stange 提交者: Herbert Xu

crypto: testmgr - allow ecdsa-nist-p256 and -p384 in FIPS mode

The kernel provides implementations of the NIST ECDSA signature
verification primitives. For key sizes of 256 and 384 bits respectively
they are approved and can be enabled in FIPS mode. Do so.
Signed-off-by: NNicolai Stange <nstange@suse.de>
Signed-off-by: NVladis Dronov <vdronov@redhat.com>
Signed-off-by: NHerbert Xu <herbert@gondor.apana.org.au>
上级 2912eb9b
...@@ -5034,12 +5034,14 @@ static const struct alg_test_desc alg_test_descs[] = { ...@@ -5034,12 +5034,14 @@ static const struct alg_test_desc alg_test_descs[] = {
}, { }, {
.alg = "ecdsa-nist-p256", .alg = "ecdsa-nist-p256",
.test = alg_test_akcipher, .test = alg_test_akcipher,
.fips_allowed = 1,
.suite = { .suite = {
.akcipher = __VECS(ecdsa_nist_p256_tv_template) .akcipher = __VECS(ecdsa_nist_p256_tv_template)
} }
}, { }, {
.alg = "ecdsa-nist-p384", .alg = "ecdsa-nist-p384",
.test = alg_test_akcipher, .test = alg_test_akcipher,
.fips_allowed = 1,
.suite = { .suite = {
.akcipher = __VECS(ecdsa_nist_p384_tv_template) .akcipher = __VECS(ecdsa_nist_p384_tv_template)
} }
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册