crypto: rng - Make crypto_stdrng_get_bytes() use normal RNG in non-FIPS mode

"stdrng" is needed only in "FIPS mode".  Therefore, make
crypto_stdrng_get_bytes() delegate to either the normal Linux RNG or to
"stdrng", depending on the current mode.

This will eliminate the need to built the SP800-90A DRBG and its
dependencies into CRYPTO_FIPS=n kernels.

Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
This commit is contained in:
Eric Biggers
2026-03-25 17:15:05 -07:00
committed by Herbert Xu
parent bdd2cc93bf
commit 65b3c2f627
2 changed files with 15 additions and 4 deletions

View File

@@ -142,7 +142,7 @@ static void crypto_put_default_rng(void)
mutex_unlock(&crypto_default_rng_lock);
}
int crypto_stdrng_get_bytes(void *buf, unsigned int len)
int __crypto_stdrng_get_bytes(void *buf, unsigned int len)
{
int err;
@@ -154,7 +154,7 @@ int crypto_stdrng_get_bytes(void *buf, unsigned int len)
crypto_put_default_rng();
return err;
}
EXPORT_SYMBOL_GPL(crypto_stdrng_get_bytes);
EXPORT_SYMBOL_GPL(__crypto_stdrng_get_bytes);
#if defined(CONFIG_CRYPTO_RNG) || defined(CONFIG_CRYPTO_RNG_MODULE)
int crypto_del_default_rng(void)