]> git.ipfire.org Git - thirdparty/dracut.git/commitdiff
fips: add 'ofb' and 'cts' block cipher modes
authorAlexey Kodanev <alexey.kodanev@oracle.com>
Fri, 29 Nov 2019 12:02:41 +0000 (15:02 +0300)
committerDaniel Molkentin <daniel@molkentin.de>
Fri, 29 Nov 2019 17:56:56 +0000 (18:56 +0100)
Add cts, Linux-5.0 commit:
196ad6043e9f ("crypto: testmgr - mark cts(cbc(aes)) as FIPS allowed")

Linux 4.20 commits for 'ofb':
dfb89ab3f0a7 ("crypto: tcrypt - add OFB functional tests")
e497c51896b3 ("crypto: ofb - add output feedback mode")

Signed-off-by: Alexey Kodanev <alexey.kodanev@oracle.com>
modules.d/01fips/module-setup.sh

index a792f549458dd441132d74653d347faf5c49c244..b723dc6ca4eb6a2f7054d7bb556c0a4fe1a4bec4 100755 (executable)
@@ -27,7 +27,7 @@ installkernel() {
         _fipsmodules+="cipher_null des3_ede aes cfb "
 
         # Modes/templates:
         _fipsmodules+="cipher_null des3_ede aes cfb "
 
         # Modes/templates:
-        _fipsmodules+="ecb cbc ctr xts gcm ccm authenc hmac cmac "
+        _fipsmodules+="ecb cbc ctr xts gcm ccm authenc hmac cmac ofb cts "
 
         # Compression algs:
         _fipsmodules+="deflate lzo zlib "
 
         # Compression algs:
         _fipsmodules+="deflate lzo zlib "