linux-kernel - Question: Earliest kernel version with FIPS-compliant DRBG?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <5cc50864-9096-497b-a86f-e37678dcb105@nutanix.com>
Date:   Tue, 7 Nov 2023 11:04:42 +0530
From:   Shivam Kumar <shivam.kumar1@...anix.com>
To:     linux-crypto@...r.kernel.org, linux-kernel@...r.kernel.org
Cc:     herbert@...dor.apana.org.au, aquini@...hat.com,
        jeremy.wayne.powell@...il.com, clemens@...isch.de,
        pwalten@....ibm.com, joe@...ches.com
Subject: Question: Earliest kernel version with FIPS-compliant DRBG?

Hi,

I recently came across a discussion on the mailing list and noted some 
Linux Kernel Mailing List (LKML) patches pertaining to the enhancement 
of the kernel's Deterministic Random Bit Generator (DRBG) to meet FIPS 
(Federal Information Processing Standards) compliance. However, I am 
currently uncertain about the status of this endeavor, specifically 
whether the kernel's DRBG has indeed been rendered FIPS-compliant.

Could you kindly provide clarification on the current status of the 
kernel's DRBG in this regard? Furthermore, if it has been made 
FIPS-compliant, I am keen to ascertain the earliest kernel version that 
incorporates this FIPS-compliant DRBG.

Thanks,
Shivam