Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1735182

Re: [kernel-hardening] Re: [PATCH v4] security/keys: rewrite all of big_key crypto

Show all headers | View raw

On Tue, Sep 19, 2017 at 9:39 AM, Theodore Ts'o <tytso@mit.edu> wrote:

> On Mon, Sep 18, 2017 at 01:24:18PM +0200, Jason A. Donenfeld wrote:
>> Good luck with getting approval... While Ted and I have our
>> differences like any two kernel developers, I really tend agree with
>> him in his attitude about this FIPS silliness. ...
>
> Let me add one more reason why FIPS compliance for the kernel is just
> ***stupid***.  The way FIPS compliance works, you have to pay hundreds
> of thousands of dollars to a FIPS certification lab to certify a
> specific binary, complete with the exact build environment (compiler,
> binutils, etc.) used to build that kernel binary.
>
> The moment you need to make a change --- say, to fix a critical
> zero-day security bug --- this breaks the FIPS certification, ...
>
> You might say that FIPS certification != FIPS compliance.  Sure, but
> the only silly people who care about FIPS compliance also need FIPS
> certification, for the US Goverment signoff.

I do not think it is just the US that matters here. If I understand
Stefan correctly, one of his concerns is German (or EU?) gov't
standards that are somehow related. I'm very hazy on details.

I emphatically agree with Ted on some points here. Making
FIPS certification a goal for kernel development would be
really dumb. Having multiple RNGs available & compile-time
options to select among them also looks silly to me; we just
need one good one.

On the other hand, I do not see why the driver should not
use a FIPS-compliant PRNG where it can. This would make
things easier for anyone who does seek certification. One
of the big distro vendors? A gov't department or contractor
that wants to use Linux? A corporation's sys admin or
security reviewer? Stefan?

I cannot see much downside to this. Is the current PRNG
more efficient? More easily maintained? Is it still the case
that random(4) must use only hashes, not ciphers, to
avoid restrictions under export laws?

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH v4] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-16 15:10 +0200
  [PATCH v5] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-16 15:20 +0200
    Re: [PATCH v5] security/keys: rewrite all of big_key crypto Eric Biggers <ebiggers3@gmail.com> - 2017-09-17 08:10 +0200
      Re: [PATCH v5] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-17 14:00 +0200
        [PATCH v6] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-17 14:00 +0200
          Re: [PATCH v6] security/keys: rewrite all of big_key crypto David Howells <dhowells@redhat.com> - 2017-09-19 17:40 +0200
            Re: [PATCH v6] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-20 17:00 +0200
          Re: [PATCH v6] security/keys: rewrite all of big_key crypto Stephan Mueller <smueller@chronox.de> - 2017-09-20 07:40 +0200
            Re: [PATCH v6] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-20 13:00 +0200
              Re: [PATCH v6] security/keys: rewrite all of big_key crypto Stephan Mueller <smueller@chronox.de> - 2017-09-20 15:50 +0200
                Re: [PATCH v6] security/keys: rewrite all of big_key crypto Stephan Mueller <smueller@chronox.de> - 2017-09-20 16:10 +0200
                Re: [PATCH v6] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-20 16:10 +0200
                Re: [PATCH v6] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-20 16:10 +0200
  Re: [PATCH v4] security/keys: rewrite all of big_key crypto Stephan Mueller <smueller@chronox.de> - 2017-09-18 11:00 +0200
    Re: [kernel-hardening] Re: [PATCH v4] security/keys: rewrite all of  big_key crypto Greg KH <gregkh@linuxfoundation.org> - 2017-09-18 11:10 +0200
      Re: [kernel-hardening] Re: [PATCH v4] security/keys: rewrite all of big_key crypto Stephan Mueller <smueller@chronox.de> - 2017-09-18 11:20 +0200
    Re: [PATCH v4] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-18 13:30 +0200
      Re: [PATCH v4] security/keys: rewrite all of big_key crypto Theodore Ts'o <tytso@mit.edu> - 2017-09-19 16:30 +0200
        Re: [kernel-hardening] Re: [PATCH v4] security/keys: rewrite all of  big_key crypto Sandy Harris <sandyinchina@gmail.com> - 2017-09-19 21:10 +0200
          Re: [kernel-hardening] Re: [PATCH v4] security/keys: rewrite all of  big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-09-19 21:20 +0200
          Re: [kernel-hardening] Re: [PATCH v4] security/keys: rewrite all of  big_key crypto Theodore Ts'o <tytso@mit.edu> - 2017-09-20 03:20 +0200

csiph-web