diff options
| author |   Jason A. Donenfeld <Jason@zx2c4.com> | 2022-02-08 19:23:17 +0100 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2022-02-21 20:11:35 +0100 |
| commit | 66e4c2b9541503d721e936cc3898c9f25f4591ff (patch) | |
| tree | 8c6ce996ba1b7ebcdd18a0068a0c341e2ee86c49 /include/linux/random.h | |
| parent | random: use simpler fast key erasure flow on per-cpu keys (diff) | |
| download | linux-dev-66e4c2b9541503d721e936cc3898c9f25f4591ff.tar.xz linux-dev-66e4c2b9541503d721e936cc3898c9f25f4591ff.zip | |
random: use hash function for crng_slow_load()
Since we have a hash function that's really fast, and the goal of
crng_slow_load() is reportedly to "touch all of the crng's state", we
can just hash the old state together with the new state and call it a
day. This way we dont need to reason about another LFSR or worry about
various attacks there. This code is only ever used at early boot and
then never again.
Cc: Theodore Ts'o <tytso@mit.edu>
Reviewed-by: Dominik Brodowski <linux@dominikbrodowski.net>
Reviewed-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'include/linux/random.h')
0 files changed, 0 insertions, 0 deletions