linux-kernel - Re: [PULL] random changes for 3.11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20170310174018.a3cbbucmubswsxw6@thunk.org>
Date:   Fri, 10 Mar 2017 12:40:19 -0500
From:   Theodore Ts'o <tytso@....edu>
To:     torvalds@...ux-foundation.org
Cc:     linux-kernel@...r.kernel.org, Jason@...c4.com
Subject: Re: [PULL] random changes for 3.11

Oops, sorry, I forgot to CC the linux-kernel mailing list.

      	       	      	     - Ted

On Fri, Mar 10, 2017 at 10:16:49AM -0500, Theodore Ts'o wrote:
> Hi Linus,
> 
> Apologies this pull request is late.  Between travel for the FAST
> conference, performance review, and paper review deadlines for Usenix
> ATC, this just fell between the cracks.
> 
> There's nothing particularly risky or controversial here; the biggest
> change was getting rid of the MD5 rng and replacing it with the
> ChaCha20 based CRNG that we use for /dev/random and getrandom(2).
> It's faster, more secure, and deletes code.
> 
> Thanks,
> 
>      	     	  	      	      - Ted
> 
> The following changes since commit a121103c922847ba5010819a3f250f1f7fc84ab8:
> 
>   Linux 4.10-rc3 (2017-01-08 14:18:17 -0800)
> 
> are available in the git repository at:
> 
>   git://git.kernel.org/pub/scm/linux/kernel/git/tytso/random.git tags/random_for_linus
> 
> for you to fetch changes up to db61ffe3a71c697aaa91c42c862a5f7557a0e562:
> 
>   random: move random_min_urandom_seed into CONFIG_SYSCTL ifdef block (2017-02-06 20:46:49 -0500)
> 
> ----------------------------------------------------------------
> Change get_random_{int,log} to use the CRNG used by /dev/urandom and
> getrandom(2).  It's faster and arguably more secure than cut-down MD5
> that we had been using.
> 
> Also do some code cleanup.
> 
> ----------------------------------------------------------------
> Fabio Estevam (1):
>       random: move random_min_urandom_seed into CONFIG_SYSCTL ifdef block
> 
> Jason A. Donenfeld (2):
>       random: use chacha20 for get_random_int/long
>       random: convert get_random_int/long into get_random_u32/u64
> 
> Stephan Mueller (1):
>       random: remove stale maybe_reseed_primary_crng
> 
> Stephan Müller (3):
>       random: remove stale urandom_init_wait
>       random: remove variable limit
>       random: fix comment for unused random_min_urandom_seed
> 
>  drivers/char/random.c  | 129 +++++++++++++++++++++++++++++++++++-------------------------------------------------------
>  include/linux/random.h |  18 ++++++++++---
>  init/main.c            |   1 -
>  3 files changed, 65 insertions(+), 83 deletions(-)