================= /proc/sys/crypto/

These files show up in /proc/sys/crypto/, depending on the kernel configuration:

.. contents:: :local:

fips_enabled

Read-only flag that indicates whether FIPS mode is enabled.

• 0: FIPS mode is disabled (default).
• 1: FIPS mode is enabled.

This value is set at boot time via the fips=1 kernel command line parameter. When enabled, the cryptographic API will restrict the use of certain algorithms and perform self-tests to ensure compliance with FIPS (Federal Information Processing Standards) requirements, such as FIPS 140-2 and the newer FIPS 140-3, depending on the kernel configuration and the module in use.

fips_name

Read-only file that contains the name of the FIPS module currently in use. The value is typically configured via the CONFIG_CRYPTO_FIPS_NAME kernel configuration option.

fips_version

Read-only file that contains the version string of the FIPS module. If CONFIG_CRYPTO_FIPS_CUSTOM_VERSION is set, it uses the value from CONFIG_CRYPTO_FIPS_VERSION. Otherwise, it defaults to the kernel release version (UTS_RELEASE).

Copyright (c) 2026, Shubham Chakraborty [email protected]

For general info and legal blurb, please look in Documentation/admin-guide/sysctl/index.rst.

.. See scripts/check-sysctl-docs to keep this up to date: .. scripts/check-sysctl-docs -vtable="crypto"
.. $(git grep -l register_sysctl_)