Skip to content
  • Neil Horman's avatar
    crypto: ansi_cprng - Force reset on allocation · d7992f42
    Neil Horman authored
    
    
    Pseudo RNGs provide predictable outputs based on input parateters {key, V, DT},
    the idea behind them is that only the user should know what the inputs are.
    While its nice to have default known values for testing purposes, it seems
    dangerous to allow the use of those default values without some sort of safety
    measure in place, lest an attacker easily guess the output of the cprng.  This
    patch forces the NEED_RESET flag on when allocating a cprng context, so that any
    user is forced to reseed it before use.  The defaults can still be used for
    testing, but this will prevent their inadvertent use, and be more secure.
       
    Signed-off-by: default avatarNeil Horman <nhorman@redhat.com>
    Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
    d7992f42