Re: [PATCH] KEYS: fix big_key dependency

From: Stephan Mueller
Date: Tue Aug 16 2016 - 01:48:55 EST


Am Dienstag, 16. August 2016, 00:45:39 CEST schrieb Kirill Marinushkin:

Hi Kirill,

> + select CRYPTO_ANSI_CPRNG

This change enables the RNG which will not pass FIPS testing any more. Hence,
this selection could cause an issue in FIPS mode (i.e. booting the kernel with
fips=1).

May I suggest CRYPTO_DRBG?

Ciao
Stephan