]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit - crypto/drbg.c
crypto: drbg - do not call drbg_instantiate in healt test
authorStephan Mueller <smueller@chronox.de>
Tue, 9 Aug 2016 19:02:36 +0000 (21:02 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Tue, 16 Aug 2016 09:20:19 +0000 (17:20 +0800)
commitd89a67134fcc7e863530624fe5a88dde0159cfb8
tree3c4e658292ecb86f636d57e72b7128acc54524f2
parentc5f91cde6ba3e16772bca3885a3d51db73ed6a97
crypto: drbg - do not call drbg_instantiate in healt test

When calling the DRBG health test in FIPS mode, the Jitter RNG is not
yet present in the kernel crypto API which will cause the instantiation
to fail and thus the health test to fail.

As the health tests cover the enforcement of various thresholds, invoke
the functions that are supposed to enforce the thresholds directly.

This patch also saves precious seed.

Reported-by: Tapas Sarangi <TSarangi@trustwave.com>
Signed-off-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/drbg.c