crypto: FIPS requires algorithm self-tests

Signed-off-by: Chuck Ebbert <cebb...@redhat.com>
---

Patch is against the latest cryptodev tree.

--- vanilla-2.6.36-rc2-git5.orig/crypto/Kconfig
+++ vanilla-2.6.36-rc2-git5/crypto/Kconfig
@@ -23,13 +23,12 @@ comment "Crypto core or helper"
 
 config CRYPTO_FIPS
        bool "FIPS 200 compliance"
-       depends on CRYPTO_ANSI_CPRNG
+       depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
        help
          This options enables the fips boot option which is
          required if you want to system to operate in a FIPS 200
          certification.  You should say no unless you know what
-         this is. Note that CRYPTO_ANSI_CPRNG is required if this
-         option is selected
+         this is.
 
 config CRYPTO_ALGAPI
        tristate
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to