mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-07-25 00:23:20 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
ea5e57cc97185329dcc5ebdcaae7e1500bf0ad0b
linux/crypto
History
Jeff Barnes 76d2e560c7 crypto: testmgr - disallow RSA PKCS#1 SHA-1 sig algs in FIPS mode 
When booted with fips=1, RSA signature generation using SHA-1 must not be
available.  However, pkcs1pad(rsa,sha1) can currently be instantiated
because it is not present in alg_test_descs; alg_test() falls through the
no_test path and succeeds, after which the algorithm appears in
/proc/crypto as fips-capable.

Add explicit alg_test_descs entries for pkcs1pad(rsa,sha1) and
pkcs1(rsa,sha1) without marking them fips_allowed, so they are treated as
not FIPS-allowed when fips=1 is enabled.

Include both names to cover kernels where RSA sign/verify is provided via
the pkcs1(...) signature template, while pkcs1pad(...) remains for the
traditional wrapper naming and/or RSAES operations.

Signed-off-by: Jeff Barnes <jeffbarnes@linux.microsoft.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
2026-05-07 16:10:02 +08:00
..
asymmetric_keys
keys: cleanup dead code in Kconfig for FIPS_SIGNATURE_SELFTEST
2026-05-05 16:15:24 +08:00
async_tx
async_xor: use xor_gen
2026-04-02 23:36:21 -07:00
krb5
kernel.h: drop hex.h and update all hex.h users
2026-01-20 19:44:19 -08:00
842.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
acompress.c
crypto: acomp - fix wrong pointer stored by acomp_save_req()
2026-04-17 16:50:21 +08:00
adiantum.c
crypto: adiantum - Drop support for asynchronous xchacha ciphers
2026-01-12 11:07:50 -08:00
aead.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
aegis128-core.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
aegis128-neon-inner.c
…
aegis128-neon.c
crypto: aegis128-neon - Move to more abstract 'ksimd' guard API
2025-11-12 09:52:01 +01:00
aegis-neon.h
…
aegis.h
crypto: aegis - Switch from crypto_ft_tab[] to aes_enc_tab[]
2026-01-12 11:39:58 -08:00
aes.c
crypto: aes - Add cmac, xcbc, and cbcmac algorithms using library
2026-03-09 13:27:20 -07:00
af_alg.c
Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2026-04-15 15:22:26 -07:00
ahash.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
akcipher.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
algapi.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
algboss.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
algif_aead.c
crypto: algif_aead - snapshot IV for async AEAD requests
2026-04-20 15:50:02 +08:00
algif_hash.c
crypto: af_alg - zero initialize memory allocated via sock_kmalloc
2025-10-17 16:03:57 +08:00
algif_rng.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
algif_skcipher.c
crypto: af_alg - limit RX SG extraction by receive buffer budget
2026-04-03 08:54:14 +08:00
anubis.c
crypto: anubis - simplify return statement in anubis_mod_init
2025-09-20 20:21:04 +08:00
api.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
arc4.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
aria_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
authenc.c
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
2025-10-17 16:03:58 +08:00
authencesn.c
crypto: authencesn - reject short ahash digests during instance creation
2026-04-23 13:44:06 +08:00
blake2b.c
crypto: blake2b - Reimplement using library API
2025-10-29 22:04:24 -07:00
blowfish_common.c
crypto: blowfish - fix typo in comment
2026-01-23 13:48:44 +08:00
blowfish_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
bpf_crypto_skcipher.c
crypto: bpf - Add MODULE_DESCRIPTION for skcipher
2025-03-02 15:19:43 +08:00
camellia_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast5_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast6_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast_common.c
crypto: Add missing MODULE_DESCRIPTION() macros
2024-05-31 17:34:56 +08:00
cbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ccm.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
chacha20poly1305.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
chacha.c
crypto: chacha - register only "-lib" drivers
2025-08-29 09:50:19 -07:00
cipher.c
module: Convert symbol namespace to string literal
2024-12-02 11:34:44 -08:00
cmac.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
compress.h
crypto: acomp - Move stream management into scomp layer
2025-03-15 16:21:22 +08:00
crc32.c
crypto/crc32[c]: register only "-lib" drivers
2025-06-30 09:31:56 -07:00
crc32c.c
crypto: crc32c - Remove another outdated comment
2026-03-17 09:29:22 -07:00
cryptd.c
crypto: cryptd - Remove unused functions
2026-03-27 18:52:44 +09:00
crypto_engine.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
crypto_null.c
crypto: crypto_null - Drop unused cipher_null crypto_alg
2026-05-07 16:10:01 +08:00
crypto_user.c
crypto: aes - Replace aes-generic with wrapper around lib
2026-01-12 11:39:58 -08:00
ctr.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cts.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
deflate.c
crypto: deflate - fix spurious -ENOSPC
2026-03-26 18:10:58 +09:00
des_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
df_sp80090a.c
crypto: drbg - Eliminate use of 'drbg_string' and lists
2026-05-07 16:10:01 +08:00
dh_helper.c
…
dh.c
crypto: dh - Use crypto_stdrng_get_bytes()
2026-04-03 08:56:11 +08:00
drbg.c
crypto: drbg - Clean up loop in drbg_hmac_update()
2026-05-07 16:10:01 +08:00
ecb.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecc_curve_defs.h
crypto: ecc - Add NIST P521 curve parameters
2024-04-12 15:07:52 +08:00
ecc.c
crypto: ecc - Use crypto_stdrng_get_bytes()
2026-04-03 08:56:12 +08:00
ecdh_helper.c
…
ecdh.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecdsa-p1363.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
ecdsa-x962.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
ecdsa.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecdsasignature.asn1
…
echainiv.c
crypto: geniv - use memcpy_sglist() instead of null skcipher
2025-05-12 13:32:53 +08:00
ecrdsa_defs.h
crypto: ecc - Add nbits field to ecc_curve structure
2024-04-12 15:07:52 +08:00
ecrdsa_params.asn1
…
ecrdsa_pub_key.asn1
…
ecrdsa.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
essiv.c
crypto: essiv - Check ssize for decryption and in-place encryption
2025-10-09 15:02:35 +08:00
fcrypt.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
fips.c
crypto: fips - annotate fips_enable() with __init to free init memory after boot
2025-12-19 14:47:47 +08:00
gcm.c
crypto: gcm - Use GHASH library instead of crypto_ahash
2026-03-23 16:44:29 -07:00
geniv.c
crypto: geniv - Remove unused spinlock from struct aead_geniv_ctx
2026-04-12 16:47:09 +08:00
hash.h
crypto: remove CONFIG_CRYPTO_STATS
2024-04-02 10:49:38 +08:00
hctr2.c
lib/crypto: gf128hash: Rename polyval module to gf128hash
2026-03-23 13:15:13 -07:00
hmac.c
crypto: hmac - Add ahash support
2025-05-19 13:48:20 +08:00
internal.h
crypto: Enable context analysis
2026-01-05 16:43:36 +01:00
jitterentropy-kcapi.c
Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2026-04-15 15:22:26 -07:00
jitterentropy-testing.c
crypto: jitter - output full sample from test interface
2024-10-19 08:44:30 +08:00
jitterentropy.c
crypto: jitterentropy - Use SHA-3 library
2026-03-09 13:27:21 -07:00
jitterentropy.h
crypto: jitterentropy - Use SHA-3 library
2026-03-09 13:27:21 -07:00
Kconfig
crypto: drbg - Use HMAC-SHA512 library API
2026-05-07 16:10:00 +08:00
kdf_sp800108.c
crypto: testmgr - replace CRYPTO_MANAGER_DISABLE_TESTS with CRYPTO_SELFTESTS
2025-05-12 13:33:14 +08:00
khazad.c
crypto: khazad - simplify return statement in khazad_mod_init
2025-12-29 08:48:35 +08:00
kpp.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
krb5enc.c
crypto: krb5enc - fix async decrypt skipping hash verification
2026-04-20 16:18:58 +08:00
lrw.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
lskcipher.c
crypto: lskcipher - Use unregister_lskciphers in register_lskciphers
2026-01-23 13:48:42 +08:00
lz4.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lz4hc.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lzo-rle.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lzo.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
Makefile
Merge tag 'mm-nonmm-stable-2026-04-15-04-20' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2026-04-16 20:11:56 -07:00
md4.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
md5.c
crypto: md5 - Implement export_core() and import_core()
2025-09-08 09:47:38 -07:00
mldsa.c
crypto: Add ML-DSA crypto_sig support
2026-01-21 22:32:50 +00:00
pcbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
pcrypt.c
crypto: pcrypt - Fix handling of MAY_BACKLOG requests
2026-04-16 17:29:40 +08:00
proc.c
crypto: Enable context analysis
2026-01-05 16:43:36 +01:00
ripemd.h
…
rmd160.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
rng.c
crypto: rng - Make crypto_stdrng_get_bytes() use normal RNG in non-FIPS mode
2026-04-03 08:56:12 +08:00
rsa_helper.c
…
rsa-pkcs1pad.c
crypto: rsassa-pkcs1 - Migrate to sig_alg backend
2024-10-05 13:22:04 +08:00
rsa.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
rsaprivkey.asn1
…
rsapubkey.asn1
…
rsassa-pkcs1.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
scatterwalk.c
Revert "crypto: scatterwalk - Move skcipher walk and use it for memcpy_sglist"
2025-11-22 10:04:50 +08:00
scompress.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
seed.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
seqiv.c
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
2025-12-19 14:47:06 +08:00
serpent_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sha1.c
crypto: sha1 - Implement export_core() and import_core()
2025-09-02 19:02:35 -07:00
sha3.c
crypto: sha3 - Reimplement using library API
2025-11-05 20:30:51 -08:00
sha256.c
crypto: sha256 - Implement export_core() and import_core()
2025-09-02 19:02:37 -07:00
sha512.c
crypto: sha512 - Implement export_core() and import_core()
2025-09-02 19:02:39 -07:00
shash.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
sig.c
crypto: api - Add support for duplicating algorithms before registration
2025-04-16 15:36:24 +08:00
simd.c
crypto: simd - Remove unused skcipher support
2026-03-22 11:17:59 +09:00
skcipher.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
skcipher.h
crypto: remove CONFIG_CRYPTO_STATS
2024-04-02 10:49:38 +08:00
sm3.c
crypto: sm3 - Replace with wrapper around library
2026-03-23 17:50:59 -07:00
sm4_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sm4.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
streebog_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
tcrypt.c
Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2026-04-15 15:22:26 -07:00
tcrypt.h
crypto: tcrypt - Remove unused poly1305 support
2025-11-22 10:04:50 +08:00
tea.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
testmgr.c
crypto: testmgr - disallow RSA PKCS#1 SHA-1 sig algs in FIPS mode
2026-05-07 16:10:02 +08:00
testmgr.h
crypto: drbg - Remove support for HMAC-SHA256 and HMAC-SHA384
2026-05-07 16:10:00 +08:00
twofish_common.c
…
twofish_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
wp512.c
crypto: wp512 - Use API partial block handling
2025-06-23 16:56:56 +08:00
xcbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
xctr.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
xts.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
xxhash_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
zstd.c
Convert 'alloc_flex' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00