tree 51f0004dac37be337d0bf12a43b7f7b35663d94d
parent f6e9af87661530e60d9faf1d96675e8f22127aa8
author Eric Biggers <ebiggers@google.com> 1554062954 -0700
committer Herbert Xu <herbert@gondor.apana.org.au> 1554705775 +0800

crypto: testmgr - add panic_on_fail module parameter

Add a module parameter cryptomgr.panic_on_fail which causes the kernel
to panic if any crypto self-tests fail.

Use cases:

- More easily detect crypto self-test failures by boot testing,
  e.g. on KernelCI.
- Get a bug report if syzkaller manages to use the template system to
  instantiate an algorithm that fails its self-tests.

The command-line option "fips=1" already does this, but it also makes
other changes not wanted for general testing, such as disabling
"unapproved" algorithms.  panic_on_fail just does what it says.

Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>