Re: [PATCH] The VIA Hardware RNG driver is for the CPU, not Chipset

2009-05-11 Thread Herbert Xu
On Mon, May 11, 2009 at 12:06:51PM +0800, Harald Welte wrote: > > Herbert: Do you accept hw_random related patches, or should they go some > different route? Yeah I'm taking hw_random patches. Thanks, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} Home Page: http://g

Re: [PATCH] The VIA Hardware RNG driver is for the CPU, not Chipset

2009-05-11 Thread Harald Welte
Hi Arjan, On Mon, May 11, 2009 at 01:22:01PM +0200, Arjan Koers wrote: > Harald Welte wrote: > >> How can multiple RNGs in current dual-processor setups and in the future > >> multicore Nano be handled? > > > > That's actually a good question. I'll probably forward that to the CPU > > division

[PATCH] crypto: compress - Return produced bytes in crypto_{,de}compress_{update,final}()

2009-05-11 Thread Geert Uytterhoeven
If crypto_{,de}compress_{update,final}() succeed, return the actual number of bytes produced instead of zero, so their users don't have to calculate that theirselves. Signed-off-by: Geert Uytterhoeven --- As we're already at 2.6.30-rc5, I do not want to delay any longer this API change for a new

[PATCH] crypto: tcrypt: add option to not exit on success

2009-05-11 Thread Jarod Wilson
At present, the tcrypt module always exits with an -EAGAIN upon successfully completing all the tests its been asked to run. There are cases where it would be much simpler to verify all tests passed if tcrypt simply stayed loaded (i.e. returned 0). Specifically, in fips mode, all self-tests need to

[PATCH 1/2 v2] crypto: mark algs allowed in fips mode

2009-05-11 Thread Jarod Wilson
Set the fips_allowed flag in testmgr.c's alg_test_descs[] for algs that are allowed to be used when in fips mode. One caveat: des isn't actually allowed anymore, but des (and thus also ecb(des)) has to be permitted, because disallowing them results in des3_ede being unable to properly register (se

[PATCH 2/2 v2] crypto: skip algs not flagged fips_allowed in fips mode

2009-05-11 Thread Jarod Wilson
Because all fips-allowed algorithms must be self-tested before they can be used, they will all have entries in testmgr.c's alg_test_descs[]. Skip self-tests for any algs not flagged as fips_approved and return -EINVAL when in fips mode. Resending with properly updated patch v2 tag. Signed-off-by:

Re: [PATCH] The VIA Hardware RNG driver is for the CPU, not Chipset

2009-05-11 Thread Arjan Koers
Harald Welte wrote: > I have sent your modifications (split in two patches, with some additional > comment/explanation) to this list. Thanks. I've applied your patches and it works for me. -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to major

Re: [PATCH] The VIA Hardware RNG driver is for the CPU, not Chipset

2009-05-11 Thread Arjan Koers
Hello Harald, Harald Welte wrote: > Dear Arjan, [...] >> How can multiple RNGs in current dual-processor setups and in the future >> multicore Nano be handled? > > That's actually a good question. I'll probably forward that to the CPU > division and see what they come up with. I would assume y