Files
linux_media/crypto
Nicolai Stange 1ce94a8c2c crypto: testmgr - disallow plain cbcmac(aes) in FIPS mode
cbcmac(aes) may be used only as part of the ccm(aes) construction in FIPS
mode. Since commit d6097b8d5d ("crypto: api - allow algs only in specific
constructions in FIPS mode") there's support for using spawns which by
itself are marked as non-approved from approved template instantiations.
So simply mark plain cbcmac(aes) as non-approved in testmgr to block any
attempts of direct instantiations in FIPS mode.

Signed-off-by: Nicolai Stange <nstange@suse.de>
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
2023-01-06 17:15:47 +08:00
..
2022-03-03 10:49:20 +12:00
2022-12-02 18:12:40 +08:00
2021-03-26 19:55:55 +11:00
2022-06-10 16:40:17 +08:00
2022-08-02 17:14:47 -06:00
2022-02-18 16:21:08 +11:00
2020-02-28 08:43:21 +08:00
2022-12-02 18:12:40 +08:00
2022-04-08 16:12:46 +08:00
2022-12-02 18:12:40 +08:00
2022-06-10 16:40:16 +08:00
2022-02-18 16:21:08 +11:00
2021-11-08 16:55:21 -08:00