Re: [PATCH 9/9] Disable ccm and ccm4309 in fips mod

[Herbert Xu]

On Tue, Oct 28, 2014 at 03:51:54PM -0200, Leonidas S. Barbosa wrote:
> NX CCM has not support to keys larger than 128 neither our hardware.
> In cases where a system is running in fips mode enabled a tcrypt test will
> crash the system in a kernel panic call.
> This patch disable, for now, CCM's algorithms in fips mode to avoid this.
> 
> Signed-off-by: Leonidas S. Barbosa <leosilva@xxxxxxxxxxxxxxxxxx>

For cases like this you should be using a software fallback rather
than just failing.  See padlock-sha for an example.

Cheers,
-- 
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/