src/sys/dev/random/yarrow.c, branch releng/6.4

Correct a random value disclosure in random(4).

2007-11-29T16:06:12Z

Security: FreeBSD-SA-07:09.random

MFC:

2006-02-08T05:58:17Z

Remove GIANT from device random. Approved by: re (scottl)

stop including rijndael-api-fst.h from rijndael.h.

2005-03-11T15:42:51Z

this is required to integrate opencrypto into crypto.

Reorganise the entropy device so that high-yield entropy sources

2004-04-09T15:47:10Z

can more easily be used INSTEAD OF the hard-working Yarrow. The only hardware source used at this point is the one inside the VIA C3 Nehemiah (Stepping 3 and above) CPU. More sources will be added in due course. Contributions welcome!

Overhaul the entropy device:

2003-11-17T23:02:21Z

o Each source gets its own queue, which is a FIFO, not a ring buffer. The FIFOs are implemented with the sys/queue.h macros. The separation is so that a low entropy/high rate source can't swamp the harvester with low-grade entropy and destroy the reseeds. o Each FIFO is limited to 256 (set as a macro, so adjustable) events queueable. Full FIFOs are ignored by the harvester. This is to prevent memory wastage, and helps to keep the kernel thread CPU usage within reasonable limits. o There is no need to break up the event harvesting into ${burst} sized chunks, so retire that feature. o Break the device away from its roots with the memory device, and allow it to get its major number automagically.

Use __FBSDID().

2003-08-24T17:55:58Z

Also some minor style cleanups.

Fix a buffer overrun in /dev/random which, due to the nature of the

2002-12-12T17:38:45Z

kernel memory allocator, is harmless. This could be a problem for other systems, though. I've modified Darren's patch a little. Original patch by: Darren Schack, Isilon Systems, Inc Also analysed by: SGI, and in particular Divy Le Ray of SGI OK'ed by: re(rwatson)

Remove #ifdef'ed Giant mutex wrappers round debugging statements.

2002-09-21T21:44:19Z

Upgrade the random device to use a "real" hash instead of building

2002-07-15T13:58:35Z

one out of a block cipher. This has 2 advantages: 1) The code is _much_ simpler 2) We aren't committing our security to one algorithm (much as we may think we trust AES). While I'm here, make an explicit reseed do a slow reseed instead of a fast; this is in line with what the original paper suggested.

Change callers of mtx_init() to pass in an appropriate lock type name. In

2002-04-04T21:03:38Z

most cases NULL is passed, but in some cases such as network driver locks (which use the MTX_NETWORK_LOCK macro) and UMA zone locks, a name is used. Tested on: i386, alpha, sparc64