diff options
| author | Eric Biggers <ebiggers@google.com> | 2019-03-31 22:09:14 +0200 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2019-04-08 08:42:55 +0200 |
| commit | eda69b0c06bc615f4b055d560ed19001619e611a (patch) | |
| tree | 51f0004dac37be337d0bf12a43b7f7b35663d94d /crypto/tcrypt.h | |
| parent | crypto: arm64/cbcmac - handle empty messages in same way as template (diff) | |
| download | linux-eda69b0c06bc615f4b055d560ed19001619e611a.tar.xz linux-eda69b0c06bc615f4b055d560ed19001619e611a.zip | |
crypto: testmgr - add panic_on_fail module parameter
Add a module parameter cryptomgr.panic_on_fail which causes the kernel
to panic if any crypto self-tests fail.
Use cases:
- More easily detect crypto self-test failures by boot testing,
e.g. on KernelCI.
- Get a bug report if syzkaller manages to use the template system to
instantiate an algorithm that fails its self-tests.
The command-line option "fips=1" already does this, but it also makes
other changes not wanted for general testing, such as disabling
"unapproved" algorithms. panic_on_fail just does what it says.
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'crypto/tcrypt.h')
0 files changed, 0 insertions, 0 deletions