crypto: testmgr - Add a flag allowing the self-tests to be disabled at runtime.
Running self-tests for a short-lived KVM VM takes 28ms on my laptop. This commit adds a flag 'cryptomgr.notests' which allows them to be disabled. However if fips=1 as well, we ignore this flag as FIPS mode mandates that the self-tests are run. Signed-off-by: Richard W.M. Jones <rjones@redhat.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
This commit is contained in:
parent
bc197b2a9c
commit
9e5c9fe4cb
|
@ -826,6 +826,9 @@ bytes respectively. Such letter suffixes can also be entirely omitted.
|
||||||
It will be ignored when crashkernel=X,high is not used
|
It will be ignored when crashkernel=X,high is not used
|
||||||
or memory reserved is below 4G.
|
or memory reserved is below 4G.
|
||||||
|
|
||||||
|
cryptomgr.notests
|
||||||
|
[KNL] Disable crypto self-tests
|
||||||
|
|
||||||
cs89x0_dma= [HW,NET]
|
cs89x0_dma= [HW,NET]
|
||||||
Format: <dma>
|
Format: <dma>
|
||||||
|
|
||||||
|
|
|
@ -35,6 +35,10 @@
|
||||||
|
|
||||||
#include "internal.h"
|
#include "internal.h"
|
||||||
|
|
||||||
|
static bool notests;
|
||||||
|
module_param(notests, bool, 0644);
|
||||||
|
MODULE_PARM_DESC(notests, "disable crypto self-tests");
|
||||||
|
|
||||||
#ifdef CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
|
#ifdef CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
|
||||||
|
|
||||||
/* a perfect nop */
|
/* a perfect nop */
|
||||||
|
@ -3868,6 +3872,11 @@ int alg_test(const char *driver, const char *alg, u32 type, u32 mask)
|
||||||
int j;
|
int j;
|
||||||
int rc;
|
int rc;
|
||||||
|
|
||||||
|
if (!fips_enabled && notests) {
|
||||||
|
printk_once(KERN_INFO "alg: self-tests disabled\n");
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
alg_test_descs_check_order();
|
alg_test_descs_check_order();
|
||||||
|
|
||||||
if ((type & CRYPTO_ALG_TYPE_MASK) == CRYPTO_ALG_TYPE_CIPHER) {
|
if ((type & CRYPTO_ALG_TYPE_MASK) == CRYPTO_ALG_TYPE_CIPHER) {
|
||||||
|
|
Loading…
Reference in New Issue