CONFIG_FIPS_SIGNATURE_SELFTEST: Run FIPS selftests on the X.509+PKCS7 signature verification

General informations

The Linux kernel configuration item CONFIG_FIPS_SIGNATURE_SELFTEST has multiple definitions:

The configuration item CONFIG_FIPS_SIGNATURE_SELFTEST:

prompt: Run FIPS selftests on the X.509+PKCS7 signature verification
type: tristate
depends on: ( CONFIG_KEYS ) && ( CONFIG_ASYMMETRIC_KEY_TYPE ) && ( CONFIG_PKCS7_MESSAGE_PARSER = CONFIG_X509_CERTIFICATE_PARSER ) && ( CONFIG_X509_CERTIFICATE_PARSER ) && ( CONFIG_CRYPTO_RSA ) && ( CONFIG_CRYPTO_SHA256 )
defined in crypto/asymmetric_keys/Kconfig
found in Linux kernels: 6.7–6.14, 6.15-rc+HEAD
modules built: x509_selftest

This option causes some selftests to be run on the signature verification code, using some built in data. This is required for FIPS.

The configuration item CONFIG_FIPS_SIGNATURE_SELFTEST:

prompt: Run FIPS selftests on the X.509+PKCS7 signature verification
type: bool
depends on: ( CONFIG_KEYS ) && ( CONFIG_ASYMMETRIC_KEY_TYPE ) && ( CONFIG_PKCS7_MESSAGE_PARSER = CONFIG_X509_CERTIFICATE_PARSER )
defined in crypto/asymmetric_keys/Kconfig
found in Linux kernels: 5.19, 6.0–6.6
modules built: x509_selftest

This option causes some selftests to be run on the signature verification code, using some built in data. This is required for FIPS.

Raw data from LKDDb:

lkddb module x509_selftest CONFIG_FIPS_SIGNATURE_SELFTEST : crypto/asymmetric_keys/Kconfig : "Run FIPS selftests on the X.509+PKCS7 signature verification" # in 6.7–6.14, 6.15-rc+HEAD

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

Custom Search

Popular queries:

Automatically generated (in year 2025). See also LKDDb sources on GitLab