The drbg.stdrng kernel command line flag allows the selection of the
DRBG used as stdrng.

Signed-off-by: Stephan Mueller <smuel...@chronox.de>
---
 Documentation/kernel-parameters.txt | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/Documentation/kernel-parameters.txt 
b/Documentation/kernel-parameters.txt
index 30a8ad0d..b970ba2 100644
--- a/Documentation/kernel-parameters.txt
+++ b/Documentation/kernel-parameters.txt
@@ -855,6 +855,16 @@ bytes respectively. Such letter suffixes can also be 
entirely omitted.
                        The filter can be disabled or changed to another
                        driver later using sysfs.
 
+       drbg.stdrng=<name>
+                       Kernel crypto API name of the SP800-90A DRBG that
+                       is marked as "stdrng". Parts of the kernel requiring
+                       random numbers may use the "stdrng" random number
+                       generator. In FIPS mode (when the kernel command line
+                       parameter fips=1 is provided), the priority of the
+                       DRBG stdrng is increased to be higher than other
+                       stdrng definitions. This implies, the DRBG is used as
+                       default in FIPS mode.
+
        drm_kms_helper.edid_firmware=[<connector>:]<file>
                        Broken monitors, graphic adapters and KVMs may
                        send no or incorrect EDID data sets. This parameter
-- 
1.9.3


--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to