[$] A loadable crypto module for FIPS certification
Many organizations require US Federal Information Processing Standard (FIPS)certification of the crypto code they are running. The certificationprocess is lengthy, but the bigger problem is that the way the cryptosubsystem is built into the kernel makes the result unable to be reusedacross kernel updates. I have proposed a patchseries that decouples the crypto subsystem into a standaloneloadable module, allowing a certified crypto module to be reused withmultiple kernels and, thus, requiring fewer lengthy recertification delays.