1 files changed, 8 insertions, 0 deletions

diff --git a/crypto/ansi_cprng.c b/crypto/ansi_cprng.c
index ffa0245e2abc..6ddd99e6114b 100644
--- a/crypto/ansi_cprng.c
+++ b/crypto/ansi_cprng.c
@@ -414,10 +414,18 @@ static int fips_cprng_get_random(struct crypto_rng *tfm, u8 *rdata,
 static int fips_cprng_reset(struct crypto_rng *tfm, u8 *seed, unsigned int slen)
 {
         u8 rdata[DEFAULT_BLK_SZ];
+        u8 *key = seed + DEFAULT_BLK_SZ;
         int rc;
 
         struct prng_context *prng = crypto_rng_ctx(tfm);
 
+        if (slen < DEFAULT_PRNG_KSZ + DEFAULT_BLK_SZ)
+                return -EINVAL;
+
+        /* fips strictly requires seed != key */
+        if (!memcmp(seed, key, DEFAULT_PRNG_KSZ))
+                return -EINVAL;
+
         rc = cprng_reset(tfm, seed, slen);
 
         if (!rc)