diff options
| author |   Neil Horman <nhorman@tuxdriver.com> | 2008-08-05 14:13:08 +0800 |
|---|---|---|
| committer |   Herbert Xu <herbert@gondor.apana.org.au> | 2008-08-29 15:50:02 +1000 |
| commit | ccb778e1841ce04b4c10b39f0dd2558ab2c6dcd4 (patch) | |
| tree | d15c704e38e731391fdb8bf8db1922aff893acd7 /crypto/ansi_cprng.c | |
| parent | crypto: skcipher - Move IV generators into their own modules (diff) | |
| download | linux-dev-ccb778e1841ce04b4c10b39f0dd2558ab2c6dcd4.tar.xz linux-dev-ccb778e1841ce04b4c10b39f0dd2558ab2c6dcd4.zip | |
crypto: api - Add fips_enable flag
Add the ability to turn FIPS-compliant mode on or off at boot
In order to be FIPS compliant, several check may need to be preformed that may
be construed as unusefull in a non-compliant mode. This patch allows us to set
a kernel flag incating that we are running in a fips-compliant mode from boot
up. It also exports that mode information to user space via a sysctl
(/proc/sys/crypto/fips_enabled).
Tested successfully by me.
Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions