random: Use getrandom (GRND_RANDOM) in FIPS mode.
Concern Raisedcf10c74bd9d5Unpublished
Actions

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

random: Use getrandom (GRND_RANDOM) in FIPS mode.

* random/rndgetentropy.c (_gcry_rndgetentropy_gather_random): Use
  GRND_RANDOM in FIPS Mode

The SP800-90C (clarified in IG D.K.) requires the following when
different DRBGs are chained:

In RHEL, this is addressed by change in the kernel, that will do this
automatically, when the getentropy () is called with GRND_RANDOM flag.

Auditors

• werner

Provenance

Jakuje	Authored on Aug 16 2022, 3:30 PM
• gniibe	Committed on Aug 30 2022, 4:02 AM

Parents

rC285bf54b1ac7: Simplify the PCT for RSA and ECDSA

Branches

Unknown

Tags

Unknown

This does not work.

getentropy always fills the BUFFER with the requested NBYTES.
getrandom fills the BUFFER with up to NBYTES and returns the number of bytes actually store.

Thus NBYTES needs to be set to the value or ret after error checking.

This commit now has outstanding concerns.Aug 30 2022, 9:55 AM

Path

Size

random/