Re: [OS-BUILD PATCH] Make CRYPTO_EC also builtin

2021-05-20 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1150#note_581378676 @NefigTut @herbert.xu2 PTAL ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedorap

Re: [OS-BUILD PATCH] Make CRYPTO_EC also builtin

2021-05-20 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1150#note_581377924 This is basically a followup of !1125 ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lis

[OS-BUILD PATCH] Make CRYPTO_EC also builtin

2021-05-20 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce Make CRYPTO_EC also builtin Our current plan is to build crypto modules that we may want to certify with FIPS-140-3 statically in the kernel. So add ECDH and ECDSA as well. We currently already claim ECDSA in RHEL-8 kernels. Adding ECDH for completeness. Bugzilla: https://bugz

Re: [OS-BUILD PATCHv3 0/2] [redhat] Embed crypto algos, modes and templates needed in the FIPS mode

2021-05-19 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125#note_579592828 LGTM for fixing boot issues in FIPS mode. Acked-by: Simo Sorce s...@redhat.com (Let's see if the bot is happy now) ___ kernel mailing list --

Re: [OS-BUILD PATCHv3 0/2] [redhat] Embed crypto algos, modes and templates needed in the FIPS mode

2021-05-19 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125#note_579591167 LGTM for fixing boot issues in FIPS mode. Acked-by: Simo Sorce ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send a

Re: [OS-BUILD PATCH] [redhat] Embed crypto algos, modes and templates needed in the FIPS mode

2021-05-10 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125#note_571911037 We should probably set y also: ECDH, ECDSA, LIB_CURVE25519, need confirm from lab that we can claim these as approved in FIPS-140-3, but we can still build them statically and then just ma

Re: [OS-BUILD PATCH] [redhat] Embed crypto algos, modes and templates needed in the FIPS mode

2021-05-10 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125#note_571906895 Not clear why we need to change values for compression algorithms? ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send

Re: [OS-BUILD PATCHv3] wireguard: disable in FIPS mode

2021-04-28 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/994#note_562929408 @liuhangbin @dzickusrh We do not have a better solution. The stuff proposed by Jason upstream was speculative and is highly invasive and we are *not* planning to do that work. Neither anyon

Re: [OS-BUILD PATCHv3] wireguard: disable in FIPS mode

2021-04-27 Thread Simo Sorce (via Email Bridge)
From: Simo Sorce on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/994#note_561539685 @liuhangbin LGTM! Simo. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproje