From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 21 Apr 2017 11:03:06 +0000 (+0200)
Subject: crypto: testmgr - Allow ecb(cipher_null) in FIPS mode
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=6175ca2ba7d2c4265d6d5590d699fbd907b24708;p=GitHub%2Fmoto-9609%2Fandroid_kernel_motorola_exynos9610.git

crypto: testmgr - Allow ecb(cipher_null) in FIPS mode

The cipher_null is not a real cipher, FIPS mode should not restrict its use.

It is used for several tests (for example in cryptsetup testsuite) and also
temporarily for reencryption of not yet encrypted device in cryptsetup-reencrypt tool.

Problem is easily reproducible with
  cryptsetup benchmark -c null

Signed-off-by: Milan Broz <gmazyland@gmail.com>
Acked-by: Stephan Müller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
---

diff --git a/crypto/testmgr.c b/crypto/testmgr.c
index 8373c727752a..6b8661ee8dc0 100644
--- a/crypto/testmgr.c
+++ b/crypto/testmgr.c
@@ -2910,6 +2910,7 @@ static const struct alg_test_desc alg_test_descs[] = {
 	}, {
 		.alg = "ecb(cipher_null)",
 		.test = alg_test_null,
+		.fips_allowed = 1,
 	}, {
 		.alg = "ecb(des)",
 		.test = alg_test_skcipher,