[v1] Check if FIPS mode is enabled when running selftests

[PATCH net 0/3] Check if FIPS mode is enabled when running selftests

Magali Lemes posted 3 patches 2 years, 6 months ago

Diff against v2 v3 v4
Download series mbox

There is a newer version of this series

tools/testing/selftests/net/fcnal-test.sh     |  27 +-
tools/testing/selftests/net/tls.c             | 265 +++++++++++++++++-
tools/testing/selftests/net/vrf-xfrm-tests.sh |  32 +--
3 files changed, 298 insertions(+), 26 deletions(-)

Expand all Fold all

[PATCH net 0/3] Check if FIPS mode is enabled when running selftests

Posted by Magali Lemes 2 years, 6 months ago

Some test cases from net/tls, net/fcnal-test and net/vrf-xfrm-tests
that rely on cryptographic functions to work and use non-compliant FIPS
algorithms fail in FIPS mode.

In order to allow these tests to pass in a wider set of kernels,
 - for net/tls, skip the test variants that use the ChaCha20-Poly1305
and SM4 algorithms, when FIPS mode is enabled;
 - for net/fcnal-test, skip the MD5 tests, when FIPS mode is enabled;
 - for net/vrf-xfrm-tests, replace the algorithms that are not
FIPS-compliant with compliant ones.

Magali Lemes (3):
  selftests: net: tls: check if FIPS mode is enabled
  selftests: net: vrf-xfrm-tests: change authentication and encryption
    algos
  selftests: net: fcnal-test: check if FIPS mode is enabled

 tools/testing/selftests/net/fcnal-test.sh     |  27 +-
 tools/testing/selftests/net/tls.c             | 265 +++++++++++++++++-
 tools/testing/selftests/net/vrf-xfrm-tests.sh |  32 +--
 3 files changed, 298 insertions(+), 26 deletions(-)

-- 
2.34.1