X-Git-Url: http://git.cascardo.info/?a=blobdiff_plain;f=crypto%2Frsa_helper.c;h=0b66dc8246068aa084dd0b44210b04dee5f2bccb;hb=e5050143d67c80a8705d6fcf5f9972663a0f082e;hp=4df6451e7543670f7836c2507e77d7329d65b10f;hpb=cc9263874b42bf98209dce0afe698b550648e770;p=cascardo%2Flinux.git

diff --git a/crypto/rsa_helper.c b/crypto/rsa_helper.c
index 4df6451e7543..0b66dc824606 100644
--- a/crypto/rsa_helper.c
+++ b/crypto/rsa_helper.c
@@ -35,8 +35,8 @@ int rsa_get_n(void *context, size_t hdrlen, unsigned char tag,
 			n_sz--;
 		}
 
-		/* In FIPS mode only allow key size 2K & 3K */
-		if (n_sz != 256 && n_sz != 384) {
+		/* In FIPS mode only allow key size 2K and higher */
+		if (n_sz < 256) {
 			pr_err("RSA: key size not allowed in FIPS mode\n");
 			return -EINVAL;
 		}