linux-kernel - Re: Fw: Arm CryptoCell driver -- default Y, even on machines where it is obviously useless

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAOtvUMfNgdYZF5VaqgF-51b0+KtxqgUFD6njXFX7evz1yAJc9A@mail.gmail.com>
Date:   Sun, 19 Apr 2020 09:33:26 +0300
From:   Gilad Ben-Yossef <gilad@...yossef.com>
To:     Gilad Ben Yossef <Gilad.BenYossef@....com>,
        Herbert Xu <herbert@...dor.apana.org.au>,
        Hadar Gat <hadar.gat@....com>
Cc:     kernel list <linux-kernel@...r.kernel.org>,
        Linux Crypto Mailing List <linux-crypto@...r.kernel.org>
Subject: Re: Fw: Arm CryptoCell driver -- default Y, even on machines where it
 is obviously useless

> > -----Original Message-----
> > From: Pavel Machek <pavel@....cz>
> > Sent: Saturday, 18 April 2020 13:44
> > To: kernel list <linux-kernel@...r.kernel.org>; Hadar Gat
> > <Hadar.Gat@....com>; herbert@...dor.apana.org.au
> > Subject: Arm CryptoCell driver -- default Y, even on machines where it is
> > obviously useless
> >
> > Hi!
> >
> > I'm configuring kernel for x86, and I get offered HW_RANDOM_CCTRNG with
> > default=Y, and help text suggesting I should enable it.
> >
> > That's... two wrong suggestions, right?
> >
> > Best regards,
> > Pavel
...
> ________________________________________
> From: Hadar Gat <Hadar.Gat@....com>
> Sent: Saturday, April 18, 2020 11:31 PM
> To: Pavel Machek; kernel list; herbert@...dor.apana.org.au
> Cc: Ofir Drang; Gilad Ben Yossef; nd
> Subject: RE: Arm CryptoCell driver -- default Y, even on machines where it is obviously useless
>
> Hi Pavel,
> I think you got it right..
> Indeed, Arm CryptoCell CCTRNG driver couldn't be used and obviously useless if the Arm CryptoCell HW does not exist in the system.

There's a delicate point here though - CryptoCell is an independent
hardware block, it is not tied to a particular CPU architecture.
There are SoCs with none-Arm architecture CPU using it.

So I would say whatever the answer is, it should be the same for any
generic embedded style HW block.

And the help text is not architecture specific anyway, is it not..?

Gilad



-- 
Gilad Ben-Yossef
Chief Coffee Drinker

values of β will give rise to dom!