diff options
author | 2002-12-06 22:03:26 +0000 | |
---|---|---|
committer | 2002-12-06 22:03:26 +0000 | |
commit | d1cd6ad0d942027aeca1f1be36c3163ada57b54f (patch) | |
tree | df034d64423582f494c77c5f9c7910357ad0e707 | |
parent | Replace things like srandom(time(NULL)) with srandomdev(3). random(3) (diff) | |
download | wireguard-openbsd-d1cd6ad0d942027aeca1f1be36c3163ada57b54f.tar.xz wireguard-openbsd-d1cd6ad0d942027aeca1f1be36c3163ada57b54f.zip |
Don't use the RNG oscillator output directly, use the sha1'd version (the
the direct data does not pass 1/2 of the FIPS140-2 tests with any degree
of regularity).
-rw-r--r-- | sys/dev/pci/ubsec.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/dev/pci/ubsec.c b/sys/dev/pci/ubsec.c index bdd9cd7c2f1..ae06b6b1bce 100644 --- a/sys/dev/pci/ubsec.c +++ b/sys/dev/pci/ubsec.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ubsec.c,v 1.121 2002/12/05 22:40:41 jason Exp $ */ +/* $OpenBSD: ubsec.c,v 1.122 2002/12/06 22:03:26 jason Exp $ */ /* * Copyright (c) 2000 Jason L. Wright (jason@thought.net) @@ -1521,8 +1521,8 @@ ubsec_rng(vsc) mcr->mcr_opktbuf.pb_next = 0; ctx->rbp_len = htole16(sizeof(struct ubsec_ctx_rngbypass)); - ctx->rbp_op = htole16(UBS_CTXOP_RNGBYPASS); - rng->rng_q.q_type = UBS_CTXOP_RNGBYPASS; + ctx->rbp_op = htole16(UBS_CTXOP_RNGSHA1); + rng->rng_q.q_type = UBS_CTXOP_RNGSHA1; bus_dmamap_sync(sc->sc_dmat, rng->rng_buf.dma_map, 0, rng->rng_buf.dma_map->dm_mapsize, BUS_DMASYNC_PREREAD); |