diff options
author | Stephan Mueller <smueller@chronox.de> | 2015-05-25 15:09:59 +0200 |
---|---|---|
committer | Herbert Xu <herbert@gondor.apana.org.au> | 2015-05-27 17:51:53 +0800 |
commit | 28ae05ee9a2bd55a79507f095a3f11c6f10f80fc (patch) | |
tree | 3035df604f0fd2530752bc5197696b31819ddb30 /crypto/testmgr.c | |
parent | a73db989e365fb576e1ed5f50e8284633bee5b38 (diff) | |
download | linux-crypto-28ae05ee9a2bd55a79507f095a3f11c6f10f80fc.tar.gz linux-crypto-28ae05ee9a2bd55a79507f095a3f11c6f10f80fc.zip |
crypto: drbg - use Jitter RNG to obtain seed
During initialization, the DRBG now tries to allocate a handle of the
Jitter RNG. If such a Jitter RNG is available during seeding, the DRBG
pulls the required entropy/nonce string from get_random_bytes and
concatenates it with a string of equal size from the Jitter RNG. That
combined string is now the seed for the DRBG.
Written differently, the initial seed of the DRBG is now:
get_random_bytes(entropy/nonce) || jitterentropy (entropy/nonce)
If the Jitter RNG is not available, the DRBG only seeds from
get_random_bytes.
CC: Andreas Steffen <andreas.steffen@strongswan.org>
CC: Theodore Ts'o <tytso@mit.edu>
CC: Sandy Harris <sandyinchina@gmail.com>
Signed-off-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions