crypto: dh - limit key size to 2048 in FIPS mode

FIPS disallows DH with keys < 2048 bits. Thus, the kernel should consider the enforcement of this limit. Signed-off-by: Stephan Mueller <[email protected]> Signed-off-by: Herbert Xu <[email protected]>
josf · Nov 26, 2021 · 1e146c3 · 1e146c3
1 parent 1ce1bac
commit 1e146c3
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/crypto/dh.c b/crypto/dh.c
@@ -5,6 +5,7 @@
  * Authors: Salvatore Benedetto <[email protected]>
  */
 
+#include <linux/fips.h>
 #include <linux/module.h>
 #include <crypto/internal/kpp.h>
 #include <crypto/kpp.h>
@@ -47,6 +48,9 @@ static inline struct dh_ctx *dh_get_ctx(struct crypto_kpp *tfm)
 
 static int dh_check_params_length(unsigned int p_len)
 {
+	if (fips_enabled)
+		return (p_len < 2048) ? -EINVAL : 0;
+
 	return (p_len < 1536) ? -EINVAL : 0;
 }