Define fips_/nonfips_ variants of sha*_zero_message_hash when the kernel is configured to use a standalone FIPS module.
Signed-off-by: Vegard Nossum <[email protected]> --- include/crypto/sha2.h | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/include/crypto/sha2.h b/include/crypto/sha2.h index ce908568009a..5af928f61d9e 100644 --- a/include/crypto/sha2.h +++ b/include/crypto/sha2.h @@ -59,6 +59,20 @@ #define SHA512_H6 0x1f83d9abfb41bd6bULL #define SHA512_H7 0x5be0cd19137e2179ULL +#ifdef CONFIG_CRYPTO_FIPS140_EXTMOD +#ifdef FIPS_MODULE +#define sha224_zero_message_hash fips_sha224_zero_message_hash +#define sha256_zero_message_hash fips_sha256_zero_message_hash +#define sha384_zero_message_hash fips_sha384_zero_message_hash +#define sha512_zero_message_hash fips_sha512_zero_message_hash +#else +#define sha224_zero_message_hash nonfips_sha224_zero_message_hash +#define sha256_zero_message_hash nonfips_sha256_zero_message_hash +#define sha384_zero_message_hash nonfips_sha384_zero_message_hash +#define sha512_zero_message_hash nonfips_sha512_zero_message_hash +#endif +#endif + extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE]; extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE]; -- 2.39.3
