Skip to content

Commit

Permalink
crypto: testmgr - mark crc32 checksum as FIPS allowed
Browse files Browse the repository at this point in the history
The CRC32 is not a cryptographic hash algorithm,
so the FIPS restrictions should not apply to it.
(The CRC32C variant is already allowed.)

This CRC32 variant is used for in dm-crypt legacy TrueCrypt
IV implementation (tcw); detected by cryptsetup test suite
failure in FIPS mode.

Signed-off-by: Milan Broz <gmazyland@gmail.com>
Reviewed-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
  • Loading branch information
mbroz authored and herbertx committed Feb 1, 2019
1 parent 87fec01 commit a8a3441
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions crypto/testmgr.c
Original file line number Diff line number Diff line change
Expand Up @@ -2740,6 +2740,7 @@ static const struct alg_test_desc alg_test_descs[] = {
}, {
.alg = "crc32",
.test = alg_test_hash,
.fips_allowed = 1,
.suite = {
.hash = __VECS(crc32_tv_template)
}
Expand Down

0 comments on commit a8a3441

Please sign in to comment.