]> git.baikalelectronics.ru Git - kernel.git/commit
crypto: drbg - Only fail when jent is unavailable in FIPS mode
authorHerbert Xu <herbert@gondor.apana.org.au>
Tue, 28 Mar 2023 03:35:23 +0000 (11:35 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 17 May 2023 09:35:42 +0000 (11:35 +0200)
commit1ef3198bca9b4a817f06d63fcefb1c3b788ab4c6
tree66261ed2ff0f429edfa2a1d6f17e20a675824e42
parentb3b4d6b7abe83be2f6d609942703e6a92afd5286
crypto: drbg - Only fail when jent is unavailable in FIPS mode

[ Upstream commit 686cd976b6ddedeeb1a1fb09ba53a891d3cc9a03 ]

When jent initialisation fails for any reason other than ENOENT,
the entire drbg fails to initialise, even when we're not in FIPS
mode.  This is wrong because we can still use the kernel RNG when
we're not in FIPS mode.

Change it so that it only fails when we are in FIPS mode.

Fixes: f5d76d425e91 ("crypto: drbg - Use callback API for random readiness")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Reviewed-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
crypto/drbg.c