Home GnuPG

random: Use getrandom (GRND_RANDOM) in FIPS mode.

Description

random: Use getrandom (GRND_RANDOM) in FIPS mode.

* random/rndgetentropy.c (_gcry_rndgetentropy_gather_random): Use
  GRND_RANDOM in FIPS Mode

The SP800-90C (clarified in IG D.K.) requires the following when
different DRBGs are chained:

  • the parent needs to be reseeded before generate operation
  • the reseed & generate needs to be atomic

In RHEL, this is addressed by change in the kernel, that will do this
automatically, when the getentropy () is called with GRND_RANDOM flag.

  • Signed-off-by: Jakub Jelen <jjelen@redhat.com>

Details

Provenance
JakujeAuthored on Aug 16 2022, 3:30 PM
gniibeCommitted on Aug 23 2022, 8:44 AM
Parents
rCa527d252b899: Simplify the PCT for RSA and ECDSA
Branches
Unknown
Tags
Unknown