Re: [OS-BUILD PATCH 0/2] random: Add hook to override device reads and getrandom(2)

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2757#note_1611555983 Such modifications of /dev/random are unacceptable upstream and remain so. Thanks! ___ kernel mailing list -- kernel@lists.fedoraproject.org

[OS-BUILD PATCH 1/2] random: Add hook to override device reads and getrandom(2)

From: Herbert Xu random: Add hook to override device reads and getrandom(2) Upstream Status: RHEL only Restore the changes to /dev/random which were reverted after 5.18. This reverts commit 900f11e054896bae7b0146055698656e3d1e20a6. This also brings the code up-to-date with respect to

[OS-BUILD PATCH 0/2] random: Add hook to override device reads and getrandom(2)

From: Herbert Xu on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2757 Upstream Status: RHEL only Restore the changes to /dev/random which were reverted after 5.18. This reverts commit 900f11e054896bae7b0146055698656e3d1e20a6 and

[OS-BUILD PATCH 2/2] crypto: rng - Override drivers/char/random in FIPS mode

From: Herbert Xu crypto: rng - Override drivers/char/random in FIPS mode Upstream Status: RHEL only Restore the changes to use the crypto RNG in drivers/char/random which were reverted after 5.18. This reverts commit 297bcb88233101e8d5062729ff3a5f989bad1c3b. This also brings the code

[OS-BUILD PATCHv3 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304 NOTE: Truncated patchset since committer email 'herb...@gondor.apana.org.au' does not match the submitter's GitLab public email address 'herbert...@redhat.com'. Upstream: RHEL

Re: [OS-BUILD PATCHv2 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304#note_648396222 Actually that's not necessary as we will always produce some data in this code path so we don't need to have a ERESTARTSYS code path. I don't see the point of creating a zero read case

Re: [OS-BUILD PATCHv2 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304#note_648295200 Yes we can do that. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to

Re: [OS-BUILD PATCHv2 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304#note_648291705 I went with the module owner because of the const in front extrng, but now that you point this out I don't think it's safe. So let me go back and change it.

Re: [OS-BUILD PATCHv2 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304#note_648289454 Sure I can do that. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to

Re: [OS-BUILD PATCHv2 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304#note_648144346 Thanks for the reviews Ondrej, this new push should address all of the problems that you've raised. ___ kernel mailing list --

[OS-BUILD PATCHv2 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304 NOTE: Truncated patchset since committer email 'herb...@gondor.apana.org.au' does not match the submitter's GitLab public email address 'herbert...@redhat.com'. Upstream: RHEL

Re: [OS-BUILD PATCH 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304#note_647566612 Unfortunately there are no plans to upstream this particular patch. Of course, other solutions may be developed upstream down the track that obviate the need for this, but we may be

[OS-BUILD PATCH 0/0] random: Override random with FIPS RNG in FIPS mode

From: Herbert Xu on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304 NOTE: Truncated patchset since committer email 'herb...@gondor.apana.org.au' does not match the submitter's GitLab public email address 'herbert...@redhat.com'. Upstream: RHEL

Re: [OS-BUILD PATCH] redhat: configs: disable CRYPTO_SM modules

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1291#note_644997731 Acked-by: Herbert Xu ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to

Re: [OS-BUILD PATCH] Revert "Merge branch 'ec_fips' into 'os-build'"

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189#note_614222774 Acked-by: Herbert Xu ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to

Re: [OS-BUILD PATCH] Make CRYPTO_EC also builtin

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1150#note_581500943 Acked-by: Herbert Xu ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to

Re: [OS-BUILD PATCHv3 0/2] [redhat] Embed crypto algos, modes and templates needed in the FIPS mode

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125#note_579476679 Looks good to me. Acked-by: Herbert Xu ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to

Re: [OS-BUILD PATCH] [redhat] Enable CONFIG_CRYPTO_CFB=y so cfb(aes) is available in FIPS mode

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1040#note_567024202 Acked-by: Herbert Xu ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to

Re: [OS-BUILD PATCHv2 0/2] configs: enable CONFIG_WIREGUARD

From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/993#note_546486460 Acked-by: Herbert Xu ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to