Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1660635
| From | Theodore Ts'o <tytso@mit.edu> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [kernel-hardening] [PATCH v4 05/13] crypto/rng: ensure that the RNG is ready before using |
| Date | 2017-06-08 02:50 +0200 |
| Message-ID | <tPTO9-5uW-7@gated-at.bofh.it> (permalink) |
| References | <tPqM9-3tE-3@gated-at.bofh.it> <tPqVR-3xj-33@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Tue, Jun 06, 2017 at 07:47:56PM +0200, Jason A. Donenfeld wrote:
> Otherwise, we might be seeding the RNG using bad randomness, which is
> dangerous. The one use of this function from within the kernel -- not
> from userspace -- is being removed (keys/big_key), so that call site
> isn't relevant in assessing this.
The use in keys/big_key is _being_ removed, so this commit is
dependent on that commit landing, correct? (Order matters, because
otherwise we don't want to potentially screw up doing a kernel bisect
and causing their kernel to deadlock during the boot while they are
trying to track down an unreleated problem.)
- Ted
Back to linux.kernel | Previous | Next | Find similar | Unroll thread
Re: [kernel-hardening] [PATCH v4 05/13] crypto/rng: ensure that the RNG is ready before using Theodore Ts'o <tytso@mit.edu> - 2017-06-08 02:50 +0200
csiph-web