Commit 2742be59 authored by Eric Biggers's avatar Eric Biggers Committed by Ard Biesheuvel
Browse files

ANDROID: fips140: define fips_enabled to 1 to enable FIPS behavior



In fips140.ko, enable the behavior that the upstream fips_enabled flag
controls, such as the XTS weak key check which apparently is required.

Note that some of this behavior, such as the DRBG continuity check, is
allegedly not required.  But to ensure we don't miss anything that was
already handled upstream, it seems best to define fips_enabled to 1.  We
can still disable anything that turns out to be problematic.

Bug: 153614920
Bug: 188620248
Change-Id: Idcded9e69e7d7cdf7f2937009af209857b0c08e2
Signed-off-by: default avatarEric Biggers <ebiggers@google.com>
parent e886dd4c
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment