Skip to content

Commit c27b2d2

Browse files
nicstangeherbertx
authored andcommitted
crypto: testmgr - allow ecdsa-nist-p256 and -p384 in FIPS mode
The kernel provides implementations of the NIST ECDSA signature verification primitives. For key sizes of 256 and 384 bits respectively they are approved and can be enabled in FIPS mode. Do so. Signed-off-by: Nicolai Stange <[email protected]> Signed-off-by: Vladis Dronov <[email protected]> Signed-off-by: Herbert Xu <[email protected]>
1 parent 2912eb9 commit c27b2d2

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

crypto/testmgr.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5034,12 +5034,14 @@ static const struct alg_test_desc alg_test_descs[] = {
50345034
}, {
50355035
.alg = "ecdsa-nist-p256",
50365036
.test = alg_test_akcipher,
5037+
.fips_allowed = 1,
50375038
.suite = {
50385039
.akcipher = __VECS(ecdsa_nist_p256_tv_template)
50395040
}
50405041
}, {
50415042
.alg = "ecdsa-nist-p384",
50425043
.test = alg_test_akcipher,
5044+
.fips_allowed = 1,
50435045
.suite = {
50445046
.akcipher = __VECS(ecdsa_nist_p384_tv_template)
50455047
}

0 commit comments

Comments
 (0)