From: Stephan Müller <smueller@chronox.de>
Date: Sun, 21 Nov 2021 14:31:27 +0000 (+0100)
Subject: crypto: rsa - limit key size to 2048 in FIPS mode
X-Git-Url: http://git.maquefel.me/?a=commitdiff_plain;h=1ce1bacc480965fab4420e561916ce45d2e90c05;p=linux.git

crypto: rsa - limit key size to 2048 in FIPS mode

FIPS disallows RSA with keys < 2048 bits. Thus, the kernel should
consider the enforcement of this limit.

Signed-off-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
---

diff --git a/crypto/rsa.c b/crypto/rsa.c
index 4cdbec95d0779..39e04176b04b2 100644
--- a/crypto/rsa.c
+++ b/crypto/rsa.c
@@ -5,6 +5,7 @@
  * Authors: Tadeusz Struk <tadeusz.struk@intel.com>
  */
 
+#include <linux/fips.h>
 #include <linux/module.h>
 #include <linux/mpi.h>
 #include <crypto/internal/rsa.h>
@@ -144,6 +145,9 @@ static int rsa_check_key_length(unsigned int len)
 	case 512:
 	case 1024:
 	case 1536:
+		if (fips_enabled)
+			return -EINVAL;
+		fallthrough;
 	case 2048:
 	case 3072:
 	case 4096: