crypto: testmgr - mark crc32 checksum as FIPS allowed
authorMilan Broz <gmazyland@gmail.com>
Fri, 25 Jan 2019 09:31:47 +0000 (10:31 +0100)
committerHerbert Xu <herbert@gondor.apana.org.au>
Fri, 1 Feb 2019 06:42:05 +0000 (14:42 +0800)
The CRC32 is not a cryptographic hash algorithm,
so the FIPS restrictions should not apply to it.
(The CRC32C variant is already allowed.)

This CRC32 variant is used for in dm-crypt legacy TrueCrypt
IV implementation (tcw); detected by cryptsetup test suite
failure in FIPS mode.

Signed-off-by: Milan Broz <gmazyland@gmail.com>
Reviewed-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/testmgr.c

index a73455b..17f57f2 100644 (file)
@@ -2740,6 +2740,7 @@ static const struct alg_test_desc alg_test_descs[] = {
        }, {
                .alg = "crc32",
                .test = alg_test_hash,
+               .fips_allowed = 1,
                .suite = {
                        .hash = __VECS(crc32_tv_template)
                }