crypto: fips - FIPS requires algorithm self-tests
Chuck Ebbert [Fri, 3 Sep 2010 11:17:49 +0000 (19:17 +0800)]
Signed-off-by: Chuck Ebbert <cebbert@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

crypto/Kconfig

index e573077..866a1d7 100644 (file)
@@ -23,13 +23,12 @@ comment "Crypto core or helper"
 
 config CRYPTO_FIPS
        bool "FIPS 200 compliance"
-       depends on CRYPTO_ANSI_CPRNG
+       depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
        help
          This options enables the fips boot option which is
          required if you want to system to operate in a FIPS 200
          certification.  You should say no unless you know what
-         this is. Note that CRYPTO_ANSI_CPRNG is required if this
-         option is selected
+         this is.
 
 config CRYPTO_ALGAPI
        tristate