xref: /linux/Documentation/admin-guide/sysctl/crypto.rst (revision 19dcccbc064d6c58eaafae1ecb94821a2535cc26)
1=================
2/proc/sys/crypto/
3=================
4
5These files show up in ``/proc/sys/crypto/``, depending on the
6kernel configuration:
7
8.. contents:: :local:
9
10fips_enabled
11============
12
13Read-only flag that indicates whether FIPS mode is enabled.
14
15- ``0``: FIPS mode is disabled (default).
16- ``1``: FIPS mode is enabled.
17
18This value is set at boot time via the ``fips=1`` kernel command line
19parameter. When enabled, the cryptographic API will restrict the use
20of certain algorithms and perform self-tests to ensure compliance with
21FIPS (Federal Information Processing Standards) requirements, such as
22FIPS 140-2 and the newer FIPS 140-3, depending on the kernel
23configuration and the module in use.
24
25fips_name
26=========
27
28Read-only file that contains the name of the FIPS module currently in use.
29The value is typically configured via the ``CONFIG_CRYPTO_FIPS_NAME``
30kernel configuration option.
31
32fips_version
33============
34
35Read-only file that contains the version string of the FIPS module.
36If ``CONFIG_CRYPTO_FIPS_CUSTOM_VERSION`` is set, it uses the value from
37``CONFIG_CRYPTO_FIPS_VERSION``. Otherwise, it defaults to the kernel
38release version (``UTS_RELEASE``).
39
40Copyright (c) 2026, Shubham Chakraborty <chakrabortyshubham66@gmail.com>
41
42For general info and legal blurb, please look in
43Documentation/admin-guide/sysctl/index.rst.
44
45.. See scripts/check-sysctl-docs to keep this up to date:
46.. scripts/check-sysctl-docs -vtable="crypto" \
47..         $(git grep -l register_sysctl_)
48