Revert upstream 9b7b946

	The default DRBG is the one that has the highest priority. The priority
	is defined based on the order of the list drbg_cores[] where the highest
	priority is given to the last entry by drbg_fill_array.

	With this patch the default DRBG is switched from HMAC SHA256 to HMAC
	SHA512 to support compliance with SP800-90B and SP800-90C (current
	draft).

	The user of the crypto API is completely unaffected by the change.

	Signed-off-by: Stephan Mueller <[email protected]>
	Acked-by: simo Sorce <[email protected]>
	Signed-off-by: Herbert Xu <[email protected]>

This changes the default DRBG back to HMAC SHA256 as more
processors have hardware acceleration for this algorithm.

Approved by the lab.

Signed-off-by: Jeremy Allison <[email protected]>

Author: jallisonciq

crypto/drbg.c

@@ -176,18 +176,18 @@ static const struct drbg_core drbg_cores[] = {
 		.blocklen_bytes = 48,
 		.cra_name = "hmac_sha384",
 		.backend_cra_name = "hmac(sha384)",
-	}, {
-		.flags = DRBG_HMAC | DRBG_STRENGTH256,
-		.statelen = 32, /* block length of cipher */
-		.blocklen_bytes = 32,
-		.cra_name = "hmac_sha256",
-		.backend_cra_name = "hmac(sha256)",
 	}, {
 		.flags = DRBG_HMAC | DRBG_STRENGTH256,
 		.statelen = 64, /* block length of cipher */
 		.blocklen_bytes = 64,
 		.cra_name = "hmac_sha512",
 		.backend_cra_name = "hmac(sha512)",
+	}, {
+		.flags = DRBG_HMAC | DRBG_STRENGTH256,
+		.statelen = 32, /* block length of cipher */
+		.blocklen_bytes = 32,
+		.cra_name = "hmac_sha256",
+		.backend_cra_name = "hmac(sha256)",
 	},
 #endif /* CONFIG_CRYPTO_DRBG_HMAC */
 };