diff options
| author |   Ard Biesheuvel <ard.biesheuvel@linaro.org> | 2017-08-25 16:50:16 +0100 |
|---|---|---|
| committer |   Ingo Molnar <mingo@kernel.org> | 2017-08-26 09:20:33 +0200 |
| commit | c2ceb5fd4e921506e86208b82fca716a2c3aad59 (patch) | |
| tree | 960b9e5412ea59b8326b83939104f1c1ada0cab1 /include/linux/efi.h | |
| parent | efi/libstub: Enable reset attack mitigation (diff) | |
| download | wireguard-linux-c2ceb5fd4e921506e86208b82fca716a2c3aad59.tar.xz wireguard-linux-c2ceb5fd4e921506e86208b82fca716a2c3aad59.zip | |
efi/random: Increase size of firmware supplied randomness
The crng code requires at least 64 bytes (2 * CHACHA20_BLOCK_SIZE)
to complete the fast boot-time init, so provide that many bytes
when invoking UEFI protocols to seed the entropy pool. Also, add
a notice so we can tell from the boot log when the seeding actually
took place.
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Matt Fleming <matt@codeblueprint.co.uk>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: linux-efi@vger.kernel.org
Link: http://lkml.kernel.org/r/20170825155019.6740-3-ard.biesheuvel@linaro.org
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Diffstat (limited to 'include/linux/efi.h')
| -rw-r--r-- | include/linux/efi.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/linux/efi.h b/include/linux/efi.h index c241acca0b15..33d41df062bc 100644 --- a/include/linux/efi.h +++ b/include/linux/efi.h @@ -1571,6 +1571,8 @@ efi_status_t efi_exit_boot_services(efi_system_table_t *sys_table, void *priv, efi_exit_boot_map_processing priv_func); +#define EFI_RANDOM_SEED_SIZE 64U + struct linux_efi_random_seed { u32 size; u8 bits[]; |