src/sys/dev/randomdev/randomdev.c, branch mainFreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=main2000-10-14T10:59:56ZAfter some complaints about the dir names, the random device is2000-10-14T10:59:56ZMark Murraymarkm@FreeBSD.org2000-10-14T10:59:56Zurn:sha1:a6278a2a42fc77094f356a290336a0fc395feb05
now in dirs called sys/*/random/ instead of sys/*/randomdev/*.
Introduce blocking, but only at startup; the random device will
block until the first reseed happens to prevent clients from
using untrustworthy output.
Provide a read_random() call for the rest of the kernel so that
the entropy device does not need to be present. This means that
things like IPX no longer need to have "device random" hardcoded
into thir kernel config. The downside is that read_random() will
provide very poor output until the entropy device is loaded and
reseeded. It is recommended that developers do NOT use the
read_random() call; instead, they should use arc4random() which
internally uses read_random().
Clean up the mutex and locking code a bit; this makes it possible
to unload the module again.
Remove unneeded includes.2000-09-21T06:23:16ZMark Murraymarkm@FreeBSD.org2000-09-21T06:23:16Zurn:sha1:4a8612fd41ecde5ed5d1be985c14bf813536c484
Submitted by: phk
Include <sys/proc.h> to silence suser() compiler warning.2000-09-18T20:42:04ZRobert Watsonrwatson@FreeBSD.org2000-09-18T20:42:04Zurn:sha1:c4ff4a846725f24058b6a495b7a7b4b0e00e7b0c
Approved by: markm
The "struct proc" argument to read_random was ill-conceived, and a2000-09-12T13:13:22ZMark Murraymarkm@FreeBSD.org2000-09-12T13:13:22Zurn:sha1:d0d519348da5646dd0a77d1551596049d3d1a6a6
hangover from previous experimentation. Remove it. This will clean
up gratuitous needs for forward references and other namespace
pollution.
Moaned about by: bde
Brought to my attention by: bp
Large upgrade to the entropy device; mainly inspired by feedback2000-09-10T13:52:19ZMark Murraymarkm@FreeBSD.org2000-09-10T13:52:19Zurn:sha1:4d87a031c0106945da094f3ea770ea9b4b5fcd6b
from many folk.
o The reseed process is now a kthread. With SMPng, kthreads are
pre-emptive, so the annoying jerkiness of the mouse is gone.
o The data structures are protected by mutexes now, not splfoo()/splx().
o The cryptographic routines are broken out into their own subroutines.
this facilitates review, and possible replacement if that is ever
found necessary.
Thanks to: kris, green, peter, jasone, grog, jhb
Forgotten to thank: You know who you are; no offense intended.
o Fix a horrible bug where small reads (< 8 bytes) would return the2000-07-25T21:18:47ZMark Murraymarkm@FreeBSD.org2000-07-25T21:18:47Zurn:sha1:7aa4389a6c7429f679ba5d0348c4251242ed4702
wrong bytes.
o Improve the public interface; use void* instead of char* or u_int64_t
to pass arbitrary data around.
Submitted by: kris ("horrible bug")
Add randomness write functionality. This does absolutely nothing for2000-07-17T12:23:04ZMark Murraymarkm@FreeBSD.org2000-07-17T12:23:04Zurn:sha1:720a3741cf8c06f597bac5a1a216b6018278dc89
entropy estimation, but causes an immediate reseed after the input
(read in sizeof(u_int64_t) chunks) is "harvested".
This will be used in the reboot "reseeder", coming in another
commit. This can be used very effectively at any time you think
your randomness is compromised; something like
# (ps -gauxwww; netstat -an; dmesg; vmstat -c10 1) > /dev/random
will give the attacker something to think about.
Fix bug with a vraiable that needs to be per-process, not static;2000-07-09T11:49:07ZMark Murraymarkm@FreeBSD.org2000-07-09T11:49:07Zurn:sha1:769afb047c958f05573d51af1ed265e67b7f4604
fix formatting of long macros.
Pointed out by: bde
Add entropy gathering code. This will work whether the module is2000-07-07T09:03:59ZMark Murraymarkm@FreeBSD.org2000-07-07T09:03:59Zurn:sha1:c9ec235ca1e53105c29450d483686482a26751e0
compiled in or loaded.
Staticize a variable.2000-06-28T18:51:15ZMark Murraymarkm@FreeBSD.org2000-06-28T18:51:15Zurn:sha1:d44f401738ed7eea729b29ca4d1420285c10cc7f
This fixes the case where linking randomdev into the kernel statically
can cause panics at shutdown time.
Reported by: sos