Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9e5c9fe4 authored by Richard W.M. Jones's avatar Richard W.M. Jones Committed by Herbert Xu
Browse files

crypto: testmgr - Add a flag allowing the self-tests to be disabled at runtime. 



Running self-tests for a short-lived KVM VM takes 28ms on my laptop.
This commit adds a flag 'cryptomgr.notests' which allows them to be
disabled.

However if fips=1 as well, we ignore this flag as FIPS mode mandates
that the self-tests are run.

Signed-off-by: default avatarRichard W.M. Jones <rjones@redhat.com>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
parent bc197b2a

Documentation/kernel-parameters.txt

+3 −0
Original line number Diff line number Diff line
@@ -826,6 +826,9 @@ bytes respectively. Such letter suffixes can also be entirely omitted. 
			It will be ignored when crashkernel=X,high is not used

			or memory reserved is below 4G.



	cryptomgr.notests

                        [KNL] Disable crypto self-tests



	cs89x0_dma=	[HW,NET]

			Format: <dma>

crypto/testmgr.c

+9 −0
Original line number Diff line number Diff line
@@ -35,6 +35,10 @@ 


#include "internal.h"



static bool notests;

module_param(notests, bool, 0644);

MODULE_PARM_DESC(notests, "disable crypto self-tests");



#ifdef CONFIG_CRYPTO_MANAGER_DISABLE_TESTS



/* a perfect nop */
@@ -3868,6 +3872,11 @@ int alg_test(const char *driver, const char *alg, u32 type, u32 mask) 
	int j;

	int rc;



	if (!fips_enabled && notests) {

		printk_once(KERN_INFO "alg: self-tests disabled\n");

		return 0;

	}



	alg_test_descs_check_order();



	if ((type & CRYPTO_ALG_TYPE_MASK) == CRYPTO_ALG_TYPE_CIPHER) {