Commit d81ed653 authored by Tom Lendacky's avatar Tom Lendacky Committed by Herbert Xu

crypto: ccp - Allow for selective disablement of crypto API algorithms

Introduce module parameters that allow for disabling of a
crypto algorithm by not registering the algorithm with the
crypto API.
Signed-off-by: default avatarTom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
parent 80e84c16
...@@ -11,6 +11,7 @@ ...@@ -11,6 +11,7 @@
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/moduleparam.h>
#include <linux/kernel.h> #include <linux/kernel.h>
#include <linux/list.h> #include <linux/list.h>
#include <linux/ccp.h> #include <linux/ccp.h>
...@@ -24,6 +25,14 @@ MODULE_LICENSE("GPL"); ...@@ -24,6 +25,14 @@ MODULE_LICENSE("GPL");
MODULE_VERSION("1.0.0"); MODULE_VERSION("1.0.0");
MODULE_DESCRIPTION("AMD Cryptographic Coprocessor crypto API support"); MODULE_DESCRIPTION("AMD Cryptographic Coprocessor crypto API support");
static unsigned int aes_disable;
module_param(aes_disable, uint, 0444);
MODULE_PARM_DESC(aes_disable, "Disable use of AES - any non-zero value");
static unsigned int sha_disable;
module_param(sha_disable, uint, 0444);
MODULE_PARM_DESC(sha_disable, "Disable use of SHA - any non-zero value");
/* List heads for the supported algorithms */ /* List heads for the supported algorithms */
static LIST_HEAD(hash_algs); static LIST_HEAD(hash_algs);
...@@ -337,21 +346,25 @@ static int ccp_register_algs(void) ...@@ -337,21 +346,25 @@ static int ccp_register_algs(void)
{ {
int ret; int ret;
ret = ccp_register_aes_algs(&cipher_algs); if (!aes_disable) {
if (ret) ret = ccp_register_aes_algs(&cipher_algs);
return ret; if (ret)
return ret;
ret = ccp_register_aes_cmac_algs(&hash_algs); ret = ccp_register_aes_cmac_algs(&hash_algs);
if (ret) if (ret)
return ret; return ret;
ret = ccp_register_aes_xts_algs(&cipher_algs); ret = ccp_register_aes_xts_algs(&cipher_algs);
if (ret) if (ret)
return ret; return ret;
}
ret = ccp_register_sha_algs(&hash_algs); if (!sha_disable) {
if (ret) ret = ccp_register_sha_algs(&hash_algs);
return ret; if (ret)
return ret;
}
return 0; return 0;
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment