fips.c

  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/*
  3 * FIPS 200 support.
  4 *
  5 * Copyright (c) 2008 Neil Horman <nhorman@tuxdriver.com>
  6 */
  7
  8#include <linux/export.h>
  9#include <linux/fips.h>
 10#include <linux/init.h>
 11#include <linux/module.h>
 12#include <linux/kernel.h>
 13#include <linux/sysctl.h>
 14#include <linux/notifier.h>
 15#include <linux/string_choices.h>
 16#include <generated/utsrelease.h>
 17
 18int fips_enabled;
 19EXPORT_SYMBOL_GPL(fips_enabled);
 20
 21ATOMIC_NOTIFIER_HEAD(fips_fail_notif_chain);
 22EXPORT_SYMBOL_GPL(fips_fail_notif_chain);
 23
 24/* Process kernel command-line parameter at boot time. fips=0 or fips=1 */
 25static int fips_enable(char *str)
 26{
 27	if (kstrtoint(str, 0, &fips_enabled))
 28		return 0;
 29
 30	fips_enabled = !!fips_enabled;
 31	pr_info("fips mode: %s\n", str_enabled_disabled(fips_enabled));
 32	return 1;
 33}
 34
 35__setup("fips=", fips_enable);
 36
 37#define FIPS_MODULE_NAME CONFIG_CRYPTO_FIPS_NAME
 38#ifdef CONFIG_CRYPTO_FIPS_CUSTOM_VERSION
 39#define FIPS_MODULE_VERSION CONFIG_CRYPTO_FIPS_VERSION
 40#else
 41#define FIPS_MODULE_VERSION UTS_RELEASE
 42#endif
 43
 44static char fips_name[] = FIPS_MODULE_NAME;
 45static char fips_version[] = FIPS_MODULE_VERSION;
 46
 47static const struct ctl_table crypto_sysctl_table[] = {
 48	{
 49		.procname	= "fips_enabled",
 50		.data		= &fips_enabled,
 51		.maxlen		= sizeof(int),
 52		.mode		= 0444,
 53		.proc_handler	= proc_dointvec
 54	},
 55	{
 56		.procname	= "fips_name",
 57		.data		= &fips_name,
 58		.maxlen		= 64,
 59		.mode		= 0444,
 60		.proc_handler	= proc_dostring
 61	},
 62	{
 63		.procname	= "fips_version",
 64		.data		= &fips_version,
 65		.maxlen		= 64,
 66		.mode		= 0444,
 67		.proc_handler	= proc_dostring
 68	},
 69};
 70
 71static struct ctl_table_header *crypto_sysctls;
 72
 73static void crypto_proc_fips_init(void)
 74{
 75	crypto_sysctls = register_sysctl("crypto", crypto_sysctl_table);
 76}
 77
 78static void crypto_proc_fips_exit(void)
 79{
 80	unregister_sysctl_table(crypto_sysctls);
 81}
 82
 83void fips_fail_notify(void)
 84{
 85	if (fips_enabled)
 86		atomic_notifier_call_chain(&fips_fail_notif_chain, 0, NULL);
 87}
 88EXPORT_SYMBOL_GPL(fips_fail_notify);
 89
 90static int __init fips_init(void)
 91{
 92	crypto_proc_fips_init();
 93	return 0;
 94}
 95
 96static void __exit fips_exit(void)
 97{
 98	crypto_proc_fips_exit();
 99}
100
101module_init(fips_init);
102module_exit(fips_exit);