linux.git/crypto/Kconfig, branch v2.6.28 Linux kernel source tree crypto: api - Disallow cryptomgr as a module if algorithms are built-in 2008-12-10T12:29:44+00:00 Herbert Xu herbert@gondor.apana.org.au 2008-12-10T12:29:44+00:00 6a0fcbb4dad15f02ca8f8ae6324fcd3fc43b9d35 If we have at least one algorithm built-in then it no longer makes sense to have the testing framework, and hence cryptomgr to be a module. It should be either on or off, i.e., built-in or disabled. This just happens to stop a potential runaway modprobe loop that seems to trigger on at least one distro. With fixes from Evgeniy Polyakov. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
If we have at least one algorithm built-in then it no longer makes
sense to have the testing framework, and hence cryptomgr to be a
module.  It should be either on or off, i.e., built-in or disabled.

This just happens to stop a potential runaway modprobe loop that
seems to trigger on at least one distro.

With fixes from Evgeniy Polyakov.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto: skcipher - Use RNG interface instead of get_random_bytes 2008-08-29T05:50:06+00:00 Herbert Xu herbert@gondor.apana.org.au 2008-08-14T12:21:31+00:00 a0f000ec9b61b99111757df138b11144236fc59b This patch makes the IV generators use the new RNG interface so that the user can pick an RNG other than the default get_random_bytes. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
This patch makes the IV generators use the new RNG interface so
that the user can pick an RNG other than the default get_random_bytes.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto: rng - RNG interface and implementation 2008-08-29T05:50:04+00:00 Neil Horman nhorman@tuxdriver.com 2008-08-14T12:15:52+00:00 17f0f4a47df9aea9ee26c939f8057c35e0be1847 This patch adds a random number generator interface as well as a cryptographic pseudo-random number generator based on AES. It is meant to be used in cases where a deterministic CPRNG is required. One of the first applications will be as an input in the IPsec IV generation process. Signed-off-by: Neil Horman <nhorman@tuxdriver.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
This patch adds a random number generator interface as well as a
cryptographic pseudo-random number generator based on AES.  It is
meant to be used in cases where a deterministic CPRNG is required.

One of the first applications will be as an input in the IPsec IV
generation process.

Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto: api - Add fips_enable flag 2008-08-29T05:50:02+00:00 Neil Horman nhorman@tuxdriver.com 2008-08-05T06:13:08+00:00 ccb778e1841ce04b4c10b39f0dd2558ab2c6dcd4 Add the ability to turn FIPS-compliant mode on or off at boot In order to be FIPS compliant, several check may need to be preformed that may be construed as unusefull in a non-compliant mode. This patch allows us to set a kernel flag incating that we are running in a fips-compliant mode from boot up. It also exports that mode information to user space via a sysctl (/proc/sys/crypto/fips_enabled). Tested successfully by me. Signed-off-by: Neil Horman <nhorman@tuxdriver.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
Add the ability to turn FIPS-compliant mode on or off at boot

In order to be FIPS compliant, several check may need to be preformed that may
be construed as unusefull in a non-compliant mode.  This patch allows us to set
a kernel flag incating that we are running in a fips-compliant mode from boot
up.  It also exports that mode information to user space via a sysctl
(/proc/sys/crypto/fips_enabled).

Tested successfully by me.

Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto: cryptomgr - Add test infrastructure 2008-08-29T05:49:55+00:00 Herbert Xu herbert@gondor.apana.org.au 2008-07-31T09:08:25+00:00 da7f033ddc9fdebb3223b0bf88a2a2ab5b797608 This patch moves the newly created alg_test infrastructure into cryptomgr. This shall allow us to use it for testing at algorithm registrations. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
This patch moves the newly created alg_test infrastructure into
cryptomgr.  This shall allow us to use it for testing at algorithm
registrations.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto: crc32c - Use Intel CRC32 instruction 2008-08-29T05:49:50+00:00 Austin Zhang austin.zhang@intel.com 2008-08-07T01:57:03+00:00 8cb51ba8e06570a5fff674b3744d12a1b089f2d0 From NHM processor onward, Intel processors can support hardware accelerated CRC32c algorithm with the new CRC32 instruction in SSE 4.2 instruction set. The patch detects the availability of the feature, and chooses the most proper way to calculate CRC32c checksum. Byte code instructions are used for compiler compatibility. No MMX / XMM registers is involved in the implementation. Signed-off-by: Austin Zhang <austin.zhang@intel.com> Signed-off-by: Kent Liu <kent.liu@intel.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
From NHM processor onward, Intel processors can support hardware accelerated
CRC32c algorithm with the new CRC32 instruction in SSE 4.2 instruction set.
The patch detects the availability of the feature, and chooses the most proper
way to calculate CRC32c checksum.
Byte code instructions are used for compiler compatibility.
No MMX / XMM registers is involved in the implementation.

Signed-off-by: Austin Zhang <austin.zhang@intel.com>
Signed-off-by: Kent Liu <kent.liu@intel.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto: Kconfig - Replace leading spaces with tabs 2008-08-29T05:48:53+00:00 Adrian Bunk bunk@kernel.org 2008-07-16T11:28:00+00:00 b6d44341864b50a308f932c39f03fb8ad5efb021 Instead of tabs there were two spaces. Signed-off-by: Adrian Bunk <bunk@kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
Instead of tabs there were two spaces.

Signed-off-by: Adrian Bunk <bunk@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Revert crypto: prng - Deterministic CPRNG 2008-07-15T15:46:24+00:00 Herbert Xu herbert@gondor.apana.org.au 2008-07-15T15:46:24+00:00 7890ea1f95fa8968fa6f5bb5860e6632932abfd3 This patch is clearly not ready yet for prime time. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
This patch is clearly not ready yet for prime time.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto: crc32c - Add ahash implementation 2008-07-10T12:35:18+00:00 Herbert Xu herbert@gondor.apana.org.au 2008-07-08T12:54:28+00:00 5773a3e6e396d5fd9de58372abe6a86b7e258e3e This patch reimplements crc32c using the ahash interface. This allows one tfm to be used by an unlimited number of users provided that they all use the same key (which all current crc32c users do). Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
This patch reimplements crc32c using the ahash interface.  This
allows one tfm to be used by an unlimited number of users provided
that they all use the same key (which all current crc32c users do).

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto: prng - Deterministic CPRNG 2008-07-10T12:35:18+00:00 Neil Horman nhorman@tuxdriver.com 2008-07-07T14:41:31+00:00 b8454eebe380677789735fd6bad368af2e6b2d1e This patch adds a cryptographic pseudo-random number generator based on CTR(AES-128). It is meant to be used in cases where a deterministic CPRNG is required. One of the first applications will be as an input in the IPsec IV generation process. Signed-off-by: Neil Horman <nhorman@tuxdriver.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> 
This patch adds a cryptographic pseudo-random number generator
based on CTR(AES-128).  It is meant to be used in cases where a
deterministic CPRNG is required.

One of the first applications will be as an input in the IPsec IV
generation process.

Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>