crypto: testmgr - Allow ecb(cipher_null) in FIPS mode

The cipher_null is not a real cipher, FIPS mode should not restrict its use.

It is used for several tests (for example in cryptsetup testsuite) and also
temporarily for reencryption of not yet encrypted device in cryptsetup-reencrypt tool.

Problem is easily reproducible with
  cryptsetup benchmark -c null

Signed-off-by: Milan Broz <gmazyland@gmail.com>
Acked-by: Stephan Müller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

diff --git a/crypto/testmgr.c b/crypto/testmgr.c
index 8373c727752a022c570fd1113fb501f8efe94ac3..6b8661ee8dc0762199fd2a80180f98c58341cb2f 100644 (file)
--- a/crypto/testmgr.c
+++ b/crypto/testmgr.c
@@ -2910,6 +2910,7 @@ static const struct alg_test_desc alg_test_descs[] = {
        }, {
                .alg = "ecb(cipher_null)",
                .test = alg_test_null,
+               .fips_allowed = 1,
        }, {
                .alg = "ecb(des)",
                .test = alg_test_skcipher,