Hi Neil:

Why does the CPRNG select FIPS? It should work with FIPS off
too, no?

commit 27300176d75e4723e2125e745a98a77bf0133f72
Author: Herbert Xu <herb...@gondor.apana.org.au>
Date:   Fri Jun 19 20:32:58 2009 +0800

    crypto: ansi_cprng - Do not select FIPS
    
    The RNG should work with FIPS disabled.
    
    Signed-off-by: Herbert Xu <herb...@gondor.apana.org.au>

diff --git a/crypto/Kconfig b/crypto/Kconfig
index 4dfdd03..03ef1a9 100644
--- a/crypto/Kconfig
+++ b/crypto/Kconfig
@@ -782,7 +782,6 @@ config CRYPTO_ANSI_CPRNG
        tristate "Pseudo Random Number Generation for Cryptographic modules"
        select CRYPTO_AES
        select CRYPTO_RNG
-       select CRYPTO_FIPS
        help
          This option enables the generic pseudo random number generator
          for cryptographic modules.  Uses the Algorithm specified in

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herb...@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to