OSDN Git Service

random: add a config option to trust the CPU's hwrng
authorTheodore Ts'o <tytso@mit.edu>
Tue, 17 Jul 2018 22:24:27 +0000 (18:24 -0400)
committerTheodore Ts'o <tytso@mit.edu>
Tue, 24 Jul 2018 19:43:24 +0000 (15:43 -0400)
commit39a8883a2b989d1d21bd8dd99f5557f0c5e89694
tree9e86c920e258b8ca73ffa3955cd82c6c1ee84cea
parent3672476edaa0660eb833f54fa9edeb505417b75c
random: add a config option to trust the CPU's hwrng

This gives the user building their own kernel (or a Linux
distribution) the option of deciding whether or not to trust the CPU's
hardware random number generator (e.g., RDRAND for x86 CPU's) as being
correctly implemented and not having a back door introduced (perhaps
courtesy of a Nation State's law enforcement or intelligence
agencies).

This will prevent getrandom(2) from blocking, if there is a
willingness to trust the CPU manufacturer.

Signed-off-by: Theodore Ts'o <tytso@mit.edu>
drivers/char/Kconfig
drivers/char/random.c