• Herbert Xu's avatar
    crypto: eseqiv - Offer normal cipher functionality without RNG · 055906d1
    Herbert Xu authored
    The RNG may not be available during early boot, e.g., the relevant
    modules may not be included in the initramfs.  As the RNG Is only
    needed for IPsec, we should not let this prevent use of ciphers
    without IV generators, e.g., for disk encryption.
    This patch postpones the RNG allocation to the init function so
    that one failure during early boot does not make the RNG unavailable
    for all subsequent users of the same cipher.
    More importantly, it lets the cipher live even if RNG allocation
    fails.  Of course we no longer offer IV generation and which will
    fail with an error if invoked.  But all other cipher capabilities
    will function as usual.
    Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
eseqiv.c 5.88 KB