summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorjason <jason@openbsd.org>2002-12-06 22:03:26 +0000
committerjason <jason@openbsd.org>2002-12-06 22:03:26 +0000
commitd1cd6ad0d942027aeca1f1be36c3163ada57b54f (patch)
treedf034d64423582f494c77c5f9c7910357ad0e707
parentReplace things like srandom(time(NULL)) with srandomdev(3). random(3) (diff)
downloadwireguard-openbsd-d1cd6ad0d942027aeca1f1be36c3163ada57b54f.tar.xz
wireguard-openbsd-d1cd6ad0d942027aeca1f1be36c3163ada57b54f.zip
Don't use the RNG oscillator output directly, use the sha1'd version (the
the direct data does not pass 1/2 of the FIPS140-2 tests with any degree of regularity).
-rw-r--r--sys/dev/pci/ubsec.c6
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/dev/pci/ubsec.c b/sys/dev/pci/ubsec.c
index bdd9cd7c2f1..ae06b6b1bce 100644
--- a/sys/dev/pci/ubsec.c
+++ b/sys/dev/pci/ubsec.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ubsec.c,v 1.121 2002/12/05 22:40:41 jason Exp $ */
+/* $OpenBSD: ubsec.c,v 1.122 2002/12/06 22:03:26 jason Exp $ */
/*
* Copyright (c) 2000 Jason L. Wright (jason@thought.net)
@@ -1521,8 +1521,8 @@ ubsec_rng(vsc)
mcr->mcr_opktbuf.pb_next = 0;
ctx->rbp_len = htole16(sizeof(struct ubsec_ctx_rngbypass));
- ctx->rbp_op = htole16(UBS_CTXOP_RNGBYPASS);
- rng->rng_q.q_type = UBS_CTXOP_RNGBYPASS;
+ ctx->rbp_op = htole16(UBS_CTXOP_RNGSHA1);
+ rng->rng_q.q_type = UBS_CTXOP_RNGSHA1;
bus_dmamap_sync(sc->sc_dmat, rng->rng_buf.dma_map, 0,
rng->rng_buf.dma_map->dm_mapsize, BUS_DMASYNC_PREREAD);