Skip to content

Commit 2912eb9

Browse files
nicstangeherbertx
authored andcommitted
crypto: testmgr - disallow plain ghash in FIPS mode
ghash may be used only as part of the gcm(aes) construction in FIPS mode. Since commit d6097b8 ("crypto: api - allow algs only in specific constructions in FIPS mode") there's support for using spawns which by itself are marked as non-approved from approved template instantiations. So simply mark plain ghash as non-approved in testmgr to block any attempts of direct instantiations in FIPS mode. Signed-off-by: Nicolai Stange <[email protected]> Signed-off-by: Vladis Dronov <[email protected]> Signed-off-by: Herbert Xu <[email protected]>
1 parent 1ce94a8 commit 2912eb9

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

crypto/testmgr.c

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5125,7 +5125,6 @@ static const struct alg_test_desc alg_test_descs[] = {
51255125
}, {
51265126
.alg = "ghash",
51275127
.test = alg_test_hash,
5128-
.fips_allowed = 1,
51295128
.suite = {
51305129
.hash = __VECS(ghash_tv_template)
51315130
}

0 commit comments

Comments
 (0)