diff options
| author |   deraadt <deraadt@openbsd.org> | 2019-10-29 02:55:49 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2019-10-29 02:55:49 +0000 |
| commit | f65494e6b175686dd7c3956310013295142d0607 (patch) | |
| tree | 33010b5ef17221263c5bd988ea090b9db5e63eff /lib/libcrypto/evp/pmeth_lib.c | |
| parent | add arc4 cipher to the bootblocks (diff) | |
| download | wireguard-openbsd-f65494e6b175686dd7c3956310013295142d0607.tar.xz wireguard-openbsd-f65494e6b175686dd7c3956310013295142d0607.zip | |
Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer
Diffstat (limited to 'lib/libcrypto/evp/pmeth_lib.c')
0 files changed, 0 insertions, 0 deletions