summary refs log tree commit diff
path: root/include/crypto/drbg.h
diff options
context:
space:
mode:
authorStephan Mueller <sm@eperm.de>2016-01-22 09:52:28 +0100
committerHerbert Xu <herbert@gondor.apana.org.au>2016-01-25 22:42:11 +0800
commitb3614763059b82c26bdd02ffcb1c016c1132aad0 (patch)
tree8d6d529fe676c6e41fe67759df49a977985f106c /include/crypto/drbg.h
parent973fb3fb50e3959d90179d09ed3ce454dd7bc6e4 (diff)
downloadlinux-b3614763059b82c26bdd02ffcb1c016c1132aad0.tar.gz
crypto: drbg - remove FIPS 140-2 continuous test
The newly released FIPS 140-2 IG 9.8 specifies that for SP800-90A
compliant DRBGs, the FIPS 140-2 continuous random number generator test
is not required any more.

This patch removes the test and all associated data structures.

Signed-off-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'include/crypto/drbg.h')
-rw-r--r--include/crypto/drbg.h4
1 files changed, 0 insertions, 4 deletions
diff --git a/include/crypto/drbg.h b/include/crypto/drbg.h
index 9756c70899d8..d961b2b16f55 100644
--- a/include/crypto/drbg.h
+++ b/include/crypto/drbg.h
@@ -117,10 +117,6 @@ struct drbg_state {
 	void *priv_data;	/* Cipher handle */
 	bool seeded;		/* DRBG fully seeded? */
 	bool pr;		/* Prediction resistance enabled? */
-#ifdef CONFIG_CRYPTO_FIPS
-	bool fips_primed;	/* Continuous test primed? */
-	unsigned char *prev;	/* FIPS 140-2 continuous test value */
-#endif
 	struct work_struct seed_work;	/* asynchronous seeding support */
 	struct crypto_rng *jent;
 	const struct drbg_state_ops *d_ops;