mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: Stephan Mueller <smueller@chronox.de>
To: linux-kernel@vger.kernel.org, linux-crypto@vger.kernel.org
Cc: herbert@gondor.apana.org.au, aquini@redhat.com,
	jeremy.wayne.powell@gmail.com, clemens@ladisch.de,
	pwalten@au1.ibm.com, joe@perches.com
Subject: [PATCH v8 7/7] Add documentation of drbg.stdrng
Date: Mon, 26 May 2014 13:30:36 +0200	[thread overview]
Message-ID: <1427752.f9YxQ9FBNN@myon.chronox.de> (raw)
In-Reply-To: <1672386.pGc00MSMM2@myon.chronox.de>

The drbg.stdrng kernel command line flag allows the selection of the
DRBG used as stdrng.

Signed-off-by: Stephan Mueller <smueller@chronox.de>
---
 Documentation/kernel-parameters.txt | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/Documentation/kernel-parameters.txt b/Documentation/kernel-parameters.txt
index 30a8ad0d..b970ba2 100644
--- a/Documentation/kernel-parameters.txt
+++ b/Documentation/kernel-parameters.txt
@@ -855,6 +855,16 @@ bytes respectively. Such letter suffixes can also be entirely omitted.
 			The filter can be disabled or changed to another
 			driver later using sysfs.
 
+	drbg.stdrng=<name>
+			Kernel crypto API name of the SP800-90A DRBG that
+			is marked as "stdrng". Parts of the kernel requiring
+			random numbers may use the "stdrng" random number
+			generator. In FIPS mode (when the kernel command line
+			parameter fips=1 is provided), the priority of the
+			DRBG stdrng is increased to be higher than other
+			stdrng definitions. This implies, the DRBG is used as
+			default in FIPS mode.
+
 	drm_kms_helper.edid_firmware=[<connector>:]<file>
 			Broken monitors, graphic adapters and KVMs may
 			send no or incorrect EDID data sets. This parameter
-- 
1.9.3



      parent reply	other threads:[~2014-05-26 11:31 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-05-26 11:25 [PATCH v8 0/7] SP800-90A Deterministic Random Bit Generator Stephan Mueller
2014-05-26 11:26 ` [PATCH v8 1/7] " Stephan Mueller
2014-05-26 11:27 ` [PATCH v8 2/7] header file for DRBG Stephan Mueller
2014-05-26 11:27 ` [PATCH v8 3/7] DRBG kernel configuration options Stephan Mueller
2014-05-26 11:28 ` [PATCH v8 4/7] compile the DRBG code Stephan Mueller
2014-05-26 11:29 ` [PATCH v8 5/7] DRBG testmgr test vectors Stephan Mueller
2014-05-26 11:29 ` [PATCH v8 6/7] Add DRBG test code to testmgr Stephan Mueller
2014-05-26 11:30 ` Stephan Mueller [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1427752.f9YxQ9FBNN@myon.chronox.de \
    --to=smueller@chronox.de \
    --cc=aquini@redhat.com \
    --cc=clemens@ladisch.de \
    --cc=herbert@gondor.apana.org.au \
    --cc=jeremy.wayne.powell@gmail.com \
    --cc=joe@perches.com \
    --cc=linux-crypto@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=pwalten@au1.ibm.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®