From: Randy Dunlap <rdunlap@infradead.org> To: "Stephan Müller" <smueller@chronox.de>, "Arnd Bergmann" <arnd@arndb.de> Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>, linux-crypto@vger.kernel.org, LKML <linux-kernel@vger.kernel.org>, linux-api@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, "Alexander E. Patrakov" <patrakov@gmail.com>, "Ahmed S. Darwish" <darwish.07@gmail.com>, "Theodore Y. Ts'o" <tytso@mit.edu>, Willy Tarreau <w@1wt.eu>, Matthew Garrett <mjg59@srcf.ucam.org>, Vito Caputo <vcaputo@pengaru.com>, Andreas Dilger <adilger.kernel@dilger.ca>, Jan Kara <jack@suse.cz>, Ray Strode <rstrode@redhat.com>, William Jon McCann <mccann@jhu.edu>, zhangjs <zachary@baishancloud.com>, Andy Lutomirski <luto@kernel.org>, Florian Weimer <fweimer@redhat.com>, Lennart Poettering <mzxreary@0pointer.de>, Nicolai Stange <nstange@suse.de>, "Peter, Matthias" <matthias.peter@bsi.bund.de>, Marcelo Henrique Cerri <marcelo.cerri@canonical.com>, Roman Drahtmueller <draht@schaltsekun.de>, Neil Horman <nhorman@redhat.com>, Julia Lawall <julia.lawall@inria.fr> Subject: Re: [PATCH v27 10/12] LRNG - add SP800-90B compliant health tests Date: Thu, 9 Jan 2020 16:20:44 -0800 [thread overview] Message-ID: <cd9e893a-ce63-4e9a-fc19-553b1c5f1cff@infradead.org> (raw) In-Reply-To: <2325404.ZKTBb4nKji@positron.chronox.de> Hi, On 1/9/20 12:34 AM, Stephan Müller wrote: > --- > drivers/char/lrng/Kconfig | 56 +++++ > drivers/char/lrng/Makefile | 1 + > drivers/char/lrng/lrng_health.c | 409 ++++++++++++++++++++++++++++++++ > 3 files changed, 466 insertions(+) > create mode 100644 drivers/char/lrng/lrng_health.c > > diff --git a/drivers/char/lrng/Kconfig b/drivers/char/lrng/Kconfig > index 10b7cbdb8c8e..7b2bb3da066c 100644 > --- a/drivers/char/lrng/Kconfig > +++ b/drivers/char/lrng/Kconfig > @@ -103,4 +103,60 @@ config LRNG_JENT > time or at runtime with the lrng_base.jitterrng configuration > variable. > > +config LRNG_HEALTH_TESTS > + bool "Enable noise source online health tests" > + help > + The online health tests validate the noise source at > + runtime for fatal errors. These tests include SP800-90B > + compliant tests which are invoked if the system is booted > + with fips=1. In case of fatal errors during active > + SP800-90B tests, the issue is logged and the noise > + data is discarded. These tests are required for full > + compliance with SP800-90B. > + > + If unsure, say Y. > + > +config LRNG_RCT_BROKEN > + bool "SP800-90B RCT with dangerous low cutoff value" > + depends on LRNG_HEALTH_TESTS > + depends on BROKEN > + default n > + help > + This option enables a dangerously low SP800-90B repetitive > + count test (RCT) cutoff value which makes it very likely > + that the RCT is triggered to raise a self test failure. self-test > + > + This option is ONLY intended for developers wanting to > + test the effectiveness of the SP800-90B RCT health test. > + > + If unsure, say N. > + > +config LRNG_APT_BROKEN > + bool "SP800-90B APT with dangerous low cutoff value" > + depends on LRNG_HEALTH_TESTS > + depends on BROKEN > + default n > + help > + This option enables a dangerously low SP800-90B adaptive > + proportion test (APT) cutoff value which makes it very > + likely that the RCT is triggered to raise a self test self-test > + failure. > + > + This option is ONLY intended for developers wanting to > + test the effectiveness of the SP800-90B APT health test. > + > + If unsure, say N. > + > +# Default taken from SP800-90B sec 4.4.1 - significance level 2^-30 > +config LRNG_RCT_CUTOFF > + int > + default 30 if !LRNG_RCT_BROKEN > + default 1 if LRNG_RCT_BROKEN > + > +# Default taken from SP800-90B sec 4.4.2 - significance level 2^-30 > +config LRNG_APT_CUTOFF > + int > + default 325 if !LRNG_APT_BROKEN > + default 32 if LRNG_APT_BROKEN > + > endif # LRNG > diff --git a/drivers/char/lrng/lrng_health.c b/drivers/char/lrng/lrng_health.c > new file mode 100644 > index 000000000000..da8b42b96918 > --- /dev/null > +++ b/drivers/char/lrng/lrng_health.c > @@ -0,0 +1,409 @@ > +// SPDX-License-Identifier: GPL-2.0 OR BSD-2-Clause > +/* > + * Linux Random Number Generator (LRNG) Health Testing > + * > + * Copyright (C) 2019 - 2020, Stephan Mueller <smueller@chronox.de> > + */ [snip] > + > +/*************************************************************************** > + * SP800-90B Compliance > + * > + * If the Linux-RNG is booted into FIPS mode, the following interfaces > + * provide an SP800-90B compliant noise source: > + * > + * * /dev/random > + * * getrandom(2) > + * * get_random_bytes when using it in conjunction with > + * add_random_ready_callback > + * > + * All other interfaces, including /dev/urandom or get_random_bytes without > + * the add_random_ready_callback cannot claim to use an SP800-90B compliant > + * noise source. > + ***************************************************************************/ > + > +/** > + * Perform SP800-90B startup testing > + */ /** in the kernel sources means "this is the beginning of a kernel-doc comment block", but this is not a kernel-doc comment block, so just use /* to begin the comment. > +static inline void lrng_sp80090b_startup(struct lrng_health *health) > +{ > + if (!health->sp80090b_startup_done && > + atomic_dec_and_test(&health->sp80090b_startup_blocks)) { > + health->sp80090b_startup_done = true; > + pr_info("SP800-90B startup health tests completed\n"); > + lrng_init_ops(0); > + > + /* > + * Force a reseed of DRNGs to ensure they are seeded with > + * entropy that passed the SP800-90B health tests. > + * As the DRNG always will reseed before generating > + * random numbers, it does not need a reseed trigger. > + */ > + lrng_drng_force_reseed(); > + } > +} > + > +/** > + * Handle failure of SP800-90B startup testing > + */ ditto > +static inline void lrng_sp80090b_startup_failure(struct lrng_health *health) > +{ > + /* Reset of LRNG and its entropy - NOTE: we are in atomic context */ > + lrng_reset(); > + > + /* > + * Reset the SP800-90B startup test. > + * > + * NOTE SP800-90B section 4.3 bullet 4 does not specify what > + * exactly is to be done in case of failure! Thus, we do what > + * makes sense, i.e. restarting the health test and thus gating > + * the output function of /dev/random and getrandom(2). > + */ > + atomic_set(&health->sp80090b_startup_blocks, > + LRNG_SP80090B_STARTUP_BLOCKS); > +} > + > +/** > + * Handle failure of SP800-90B runtime testing > + */ ditto > +static inline void lrng_sp80090b_runtime_failure(struct lrng_health *health) > +{ > + lrng_sp80090b_startup_failure(health); > + health->sp80090b_startup_done = false; > +} > + > +static inline void lrng_sp80090b_failure(struct lrng_health *health) > +{ > + if (health->sp80090b_startup_done) { > + pr_err("SP800-90B runtime health test failure - invalidating " > + "all existing entropy and initiate SP800-90B startup\n"); > + lrng_sp80090b_runtime_failure(health); > + } else { > + pr_err("SP800-90B startup test failure - resetting\n"); > + lrng_sp80090b_startup_failure(health); > + } > +} > + > +/** > + * Is the SP800-90B startup testing complete? > + * > + * This function is called by the LRNG to determine whether to unblock > + * a certain user interface. Therefore, only the potentially blocking > + * user interfaces are considered SP800-90B compliant. > + */ ditto. > +bool lrng_sp80090b_startup_complete(void) > +{ > + struct lrng_health *health = &lrng_health; > + > + return (lrng_sp80090b_health_enabled()) ? health->sp80090b_startup_done: > + true; > +} > + > +bool lrng_sp80090b_compliant(void) > +{ > + struct lrng_health *health = &lrng_health; > + > + return lrng_sp80090b_health_enabled() && health->sp80090b_startup_done; > +} > + > +/*************************************************************************** > + * Adaptive Proportion Test > + * > + * This test complies with SP800-90B section 4.4.2. > + ***************************************************************************/ > + > +/** > + * Reset the APT counter > + * > + * @health [in] Reference to health state > + */ ditto > +static inline void lrng_apt_reset(struct lrng_health *health, > + unsigned int time_masked) > +{ > + struct lrng_apt *apt = &health->apt; > + > + pr_debug("APT value %d for base %d\n", > + atomic_read(&apt->apt_count), atomic_read(&apt->apt_base)); > + > + /* Reset APT */ > + atomic_set(&apt->apt_count, 0); > + atomic_set(&apt->apt_base, time_masked); > +} > + > +static inline void lrng_apt_restart(struct lrng_health *health) > +{ > + struct lrng_apt *apt = &health->apt; > + > + atomic_set(&apt->apt_trigger, LRNG_APT_WINDOW_SIZE); > +} > + > +/** > + * Insert a new entropy event into APT > + * > + * This function does is void as it does not decide about the fate of a time > + * stamp. An APT failure can only happen at the same time of a stuck test > + * failure. Thus, the stuck failure will already decide how the time stamp > + * is handled. > + * > + * @health [in] Reference to health state > + * @now_time [in] Time stamp to process > + */ ditto or use complete kernel-doc notation. > +static inline void lrng_apt_insert(struct lrng_health *health, > + unsigned int now_time) > +{ > + struct lrng_apt *apt = &health->apt; > + > + if (!lrng_sp80090b_health_requested()) > + return; > + > + now_time &= LRNG_APT_WORD_MASK; > + > + /* Initialization of APT */ > + if (!apt->apt_base_set) { > + atomic_set(&apt->apt_base, now_time); > + apt->apt_base_set = true; > + return; > + } > + > + if (now_time == (unsigned int)atomic_read(&apt->apt_base)) { > + u32 apt_val = (u32)atomic_inc_return_relaxed(&apt->apt_count); > + > + if (apt_val >= CONFIG_LRNG_APT_CUTOFF) > + lrng_sp80090b_failure(health); > + } > + > + if (atomic_dec_and_test(&apt->apt_trigger)) { > + lrng_apt_restart(health); > + lrng_apt_reset(health, now_time); > + lrng_sp80090b_startup(health); > + } > +} > + > +/*************************************************************************** > + * Repetition Count Test > + * > + * The LRNG uses an enhanced version of the Repetition Count Test > + * (RCT) specified in SP800-90B section 4.4.1. Instead of counting identical > + * back-to-back values, the input to the RCT is the counting of the stuck > + * values while filling the entropy pool. > + * > + * The RCT is applied with an alpha of 2^-30 compliant to FIPS 140-2 IG 9.8. > + * > + * During the counting operation, the LRNG always calculates the RCT > + * cut-off value of C. If that value exceeds the allowed cut-off value, > + * the LRNG will invalidate all entropy for the entropy pool which implies > + * that no data can be extracted from the entropy pool unless new entropy > + * is received. > + ***************************************************************************/ > + > +/** > + * Hot code path - Insert data for Repetition Count Test > + * > + * @health: Reference to health information > + * @stuck: Decision of stuck test > + */ ditto > +static inline void lrng_rct(struct lrng_health *health, int stuck) > +{ > + struct lrng_rct *rct = &health->rct; > + > + if (!lrng_sp80090b_health_requested()) > + return; > + > + if (stuck) { > + u32 rct_count = atomic_add_return_relaxed(1, &rct->rct_count); > + > + pr_debug("RCT count: %u\n", rct_count); > + > + /* > + * The cutoff value is based on the following consideration: > + * alpha = 2^-30 as recommended in FIPS 140-2 IG 9.8. > + * In addition, we imply an entropy value H of 1 bit as this > + * is the minimum entropy required to provide full entropy. > + * > + * Note, rct_count (which equals to value B in the > + * pseudo code of SP800-90B section 4.4.1) starts with zero. > + * Hence we need to subtract one from the cutoff value as > + * calculated following SP800-90B. > + */ > + if (rct_count >= CONFIG_LRNG_RCT_CUTOFF) { > + atomic_set(&rct->rct_count, 0); > + > + /* > + * APT must start anew as we consider all previously > + * recorded data to contain no entropy. > + */ > + lrng_apt_restart(health); > + > + lrng_sp80090b_failure(health); > + } > + } else { > + atomic_set(&rct->rct_count, 0); > + } > +} > + > +/*************************************************************************** > + * Stuck Test > + * > + * Checking the: > + * 1st derivative of the event occurrence (time delta) > + * 2nd derivative of the event occurrence (delta of time deltas) > + * 3rd derivative of the event occurrence (delta of delta of time deltas) > + * > + * All values must always be non-zero. The stuck test is only valid disabled if > + * high-resolution time stamps are identified after initialization. > + ***************************************************************************/ > + > +static inline u32 lrng_delta(u32 prev, u32 next) > +{ > + /* > + * Note that this (unsigned) subtraction does yield the correct value > + * in the wraparound-case, i.e. when next < prev. > + */ > + return (next - prev); > +} > + > +/** > + * Hot code path > + * > + * @health: Reference to health information > + * @now: Event time > + * @return: 0 event occurrence not stuck (good time stamp) > + * != 0 event occurrence stuck (reject time stamp) > + */ ditto > +static inline int lrng_irq_stuck(struct lrng_stuck_test *stuck, u32 now_time) > +{ > + u32 delta = lrng_delta(stuck->last_time, now_time); > + u32 delta2 = lrng_delta(stuck->last_delta, delta); > + u32 delta3 = lrng_delta(stuck->last_delta2, delta2); > + > + stuck->last_time = now_time; > + stuck->last_delta = delta; > + stuck->last_delta2 = delta2; > + > + if (!delta || !delta2 || !delta3) > + return 1; > + > + return 0; > +} > + > +/*************************************************************************** > + * Health test interfaces > + ***************************************************************************/ > + > +/** > + * Disable all health tests > + */ ditto > +void lrng_health_disable(void) > +{ > + struct lrng_health *health = &lrng_health; > + > + health->health_test_enabled = false; > + > + if (lrng_sp80090b_health_requested()) > + pr_warn("SP800-90B compliance requested but the Linux RNG is " > + "NOT SP800-90B compliant\n"); > +} > + > +/** > + * Hot code path - Perform health test on time stamp received from an event > + * > + * @now_time Time stap > + */ ditto > +enum lrng_health_res lrng_health_test(u32 now_time) > +{ Thanks. -- ~Randy
next prev parent reply other threads:[~2020-01-10 0:21 UTC|newest] Thread overview: 162+ messages / expand[flat|nested] mbox.gz Atom feed top 2019-11-11 18:17 [PATCH v24 00/12] /dev/random - a new approach with full SP800-90B compliance Stephan Müller 2019-11-11 18:18 ` [PATCH v24 01/12] Linux Random Number Generator Stephan Müller 2019-11-11 23:54 ` Thomas Gleixner 2019-11-12 2:25 ` Stephan Müller 2019-11-12 10:16 ` Thomas Gleixner 2019-11-12 22:30 ` kbuild test robot 2019-11-12 23:15 ` Stephan Müller 2019-11-13 0:14 ` kbuild test robot 2019-11-13 0:25 ` Stephan Müller 2019-11-24 4:51 ` Sandy Harris 2019-11-24 9:02 ` Stephan Mueller 2019-11-11 18:19 ` [PATCH v24 02/12] LRNG - allocate one SDRNG instance per NUMA node Stephan Müller 2019-11-11 18:20 ` [PATCH v24 03/12] LRNG - /proc interface Stephan Müller 2019-11-11 18:20 ` [PATCH v24 04/12] LRNG - add switchable DRNG support Stephan Müller 2019-11-11 18:21 ` [PATCH v24 05/12] crypto: DRBG - externalize DRBG functions for LRNG Stephan Müller 2019-11-11 18:21 ` [PATCH v24 06/12] LRNG - add SP800-90A DRBG extension Stephan Müller 2019-11-11 18:22 ` [PATCH v24 07/12] LRNG - add kernel crypto API PRNG extension Stephan Müller 2019-11-11 18:23 ` [PATCH v24 08/12] crypto: provide access to a static Jitter RNG state Stephan Müller 2019-11-11 18:23 ` [PATCH v24 09/12] LRNG - add Jitter RNG fast noise source Stephan Müller 2019-11-11 18:24 ` [PATCH v24 10/12] LRNG - add TRNG support Stephan Müller 2019-11-11 18:26 ` [PATCH v24 11/12] LRNG - add SP800-90B compliant health tests Stephan Müller 2019-11-12 19:58 ` Alexander E. Patrakov 2019-11-12 23:11 ` Stephan Müller 2019-11-13 0:36 ` Stephan Müller 2019-11-13 6:02 ` Alexander E. Patrakov 2019-11-14 1:46 ` Stephan Müller 2019-11-11 18:26 ` [PATCH v24 12/12] LRNG - add interface for gathering of raw entropy Stephan Müller 2019-11-12 20:55 ` kbuild test robot 2019-11-12 23:13 ` Stephan Müller 2019-11-12 13:23 ` [PATCH v24 00/12] /dev/random - a new approach with full SP800-90B compliance Florian Weimer 2019-11-12 22:43 ` Stephan Müller 2019-11-12 15:33 ` Andy Lutomirski 2019-11-12 23:03 ` Stephan Müller 2019-11-12 23:26 ` Stephan Müller 2019-11-13 4:24 ` Stephan Müller 2019-11-13 4:48 ` Andy Lutomirski 2019-11-13 12:16 ` Stephan Müller 2019-11-16 9:32 ` [PATCH v25 00/12] /dev/random - a new approach with full SP800-90B Stephan Müller 2019-11-16 9:33 ` [PATCH v25 01/12] Linux Random Number Generator Stephan Müller 2019-11-16 11:25 ` Thomas Gleixner 2019-11-17 10:30 ` Stephan Müller 2019-11-16 18:13 ` Nicolai Stange 2019-11-17 11:01 ` Stephan Müller 2019-11-16 9:33 ` [PATCH v25 02/12] LRNG - allocate one SDRNG instance per NUMA node Stephan Müller 2019-11-16 9:34 ` [PATCH v25 03/12] LRNG - /proc interface Stephan Müller 2019-11-16 16:39 ` Andy Lutomirski 2019-11-17 12:16 ` Stephan Müller 2019-11-19 10:06 ` Andy Lutomirski 2019-11-19 10:55 ` Stephan Mueller 2019-11-19 17:40 ` Andy Lutomirski 2019-11-16 23:36 ` Eric W. Biederman 2019-11-17 11:37 ` Stephan Müller 2019-11-16 9:34 ` [PATCH v25 04/12] LRNG - add switchable DRNG support Stephan Müller 2019-11-16 9:35 ` [PATCH v25 05/12] crypto: DRBG - externalize DRBG functions for LRNG Stephan Müller 2019-11-16 9:35 ` [PATCH v25 06/12] LRNG - add SP800-90A DRBG extension Stephan Müller 2019-11-16 9:35 ` [PATCH v25 07/12] LRNG - add kernel crypto API PRNG extension Stephan Müller 2019-11-16 9:36 ` [PATCH v25 08/12] crypto: provide access to a static Jitter RNG state Stephan Müller 2019-11-16 9:36 ` [PATCH v25 09/12] LRNG - add Jitter RNG fast noise source Stephan Müller 2019-11-20 13:33 ` Neil Horman 2019-11-20 20:07 ` Stephan Müller 2019-11-21 14:19 ` Neil Horman 2019-11-21 14:33 ` Stephan Mueller 2019-11-16 9:37 ` [PATCH v25 10/12] LRNG - add TRNG support Stephan Müller 2019-11-16 16:09 ` Andy Lutomirski 2019-11-17 11:10 ` Stephan Müller 2019-11-19 10:07 ` Andy Lutomirski 2019-11-19 10:46 ` Stephan Mueller 2019-11-19 12:41 ` Greg Kroah-Hartman 2019-11-20 8:58 ` Stephan Müller 2019-11-20 9:55 ` Alexander E. Patrakov 2019-11-20 13:29 ` Greg Kroah-Hartman 2019-11-20 19:51 ` Stephan Müller 2019-11-20 19:57 ` Alexander E. Patrakov 2019-11-20 20:32 ` Greg Kroah-Hartman 2019-11-21 13:06 ` Stephan Müller 2019-11-16 9:37 ` [PATCH v25 11/12] LRNG - add SP800-90B compliant health tests Stephan Müller 2019-11-16 9:38 ` [PATCH v25 12/12] LRNG - add interface for gathering of raw entropy Stephan Müller 2019-11-16 16:51 ` Andy Lutomirski 2019-11-17 22:55 ` Stephan Müller 2019-11-19 10:04 ` Andy Lutomirski 2019-11-19 17:17 ` Randy Dunlap 2019-11-20 9:01 ` Stephan Müller 2019-11-21 12:18 ` Nicolai Stange 2019-11-21 15:18 ` Stephan Müller 2019-11-23 20:08 ` [PATCH v26 00/12] /dev/random - a new approach with full SP800-90B Stephan Müller 2019-11-23 20:10 ` [PATCH v26 01/12] Linux Random Number Generator Stephan Müller 2019-11-24 22:44 ` kbuild test robot 2019-11-25 6:29 ` Stephan Mueller 2019-11-23 20:10 ` [PATCH v26 02/12] LRNG - allocate one SDRNG instance per NUMA node Stephan Müller 2019-11-23 20:11 ` [PATCH v26 03/12] LRNG - sysctls and /proc interface Stephan Müller 2019-11-23 20:11 ` [PATCH v26 04/12] LRNG - add switchable DRNG support Stephan Müller 2019-11-23 20:31 ` [PATCH v26 05/12] crypto: DRBG - externalize DRBG functions for LRNG Stephan Müller 2019-11-23 20:32 ` [PATCH v26 06/12] LRNG - add SP800-90A DRBG extension Stephan Müller 2019-11-23 20:32 ` [PATCH v26 07/12] LRNG - add kernel crypto API PRNG extension Stephan Müller 2019-11-23 20:33 ` [PATCH v26 08/12] crypto: provide access to a static Jitter RNG state Stephan Müller 2019-11-23 20:34 ` [PATCH v26 09/12] LRNG - add Jitter RNG fast noise source Stephan Müller 2019-11-23 20:34 ` [PATCH v26 10/12] LRNG - add TRNG support Stephan Müller 2019-11-23 20:34 ` [PATCH v26 11/12] LRNG - add SP800-90B compliant health tests Stephan Müller 2019-11-23 20:35 ` [PATCH v26 12/12] LRNG - add interface for gathering of raw entropy Stephan Müller 2020-01-09 8:29 ` [PATCH v27 00/12] /dev/random - a new approach with full SP800-90B Stephan Müller 2020-01-09 8:30 ` [PATCH v27 01/12] Linux Random Number Generator Stephan Müller 2020-01-16 6:09 ` kbuild test robot 2020-01-16 6:41 ` Stephan Mueller 2020-01-09 8:31 ` [PATCH v27 02/12] LRNG - allocate one DRNG instance per NUMA node Stephan Müller 2020-01-09 8:31 ` [PATCH v27 03/12] LRNG - sysctls and /proc interface Stephan Müller 2020-01-09 8:32 ` [PATCH v27 04/12] LRNG - add switchable DRNG support Stephan Müller 2020-01-11 7:09 ` kbuild test robot 2020-01-12 10:12 ` Stephan Müller 2020-01-09 8:32 ` [PATCH v27 05/12] crypto: DRBG - externalize DRBG functions for LRNG Stephan Müller 2020-01-09 8:32 ` [PATCH v27 06/12] LRNG - add SP800-90A DRBG extension Stephan Müller 2020-01-09 8:33 ` [PATCH v27 07/12] LRNG - add kernel crypto API PRNG extension Stephan Müller 2020-01-09 8:33 ` [PATCH v27 08/12] crypto: provide access to a static Jitter RNG state Stephan Müller 2020-01-09 8:34 ` [PATCH v27 09/12] LRNG - add Jitter RNG fast noise source Stephan Müller 2020-01-10 0:24 ` Randy Dunlap 2020-01-10 7:45 ` Stephan Mueller 2020-01-09 8:34 ` [PATCH v27 10/12] LRNG - add SP800-90B compliant health tests Stephan Müller 2020-01-10 0:20 ` Randy Dunlap [this message] 2020-01-10 8:27 ` Stephan Mueller 2020-01-09 8:35 ` [PATCH v27 11/12] LRNG - add interface for gathering of raw entropy Stephan Müller 2020-01-09 8:35 ` [PATCH v27 12/12] LRNG - add power-on and runtime self-tests Stephan Müller 2020-01-10 0:22 ` Randy Dunlap 2020-01-10 7:48 ` Stephan Mueller 2020-01-13 10:39 ` Dan Carpenter 2020-01-13 10:46 ` Stephan Mueller 2020-01-15 10:31 ` [PATCH v28 00/12] /dev/random - a new approach with full SP800-90B Stephan Müller 2020-01-15 10:31 ` [PATCH v28 01/12] Linux Random Number Generator Stephan Müller 2020-01-16 0:11 ` Randy Dunlap 2020-01-16 7:22 ` Stephan Mueller 2020-01-15 10:32 ` [PATCH v28 02/12] LRNG - allocate one DRNG instance per NUMA node Stephan Müller 2020-01-15 10:32 ` [PATCH v28 03/12] LRNG - sysctls and /proc interface Stephan Müller 2020-01-15 10:32 ` [PATCH v28 04/12] LRNG - add switchable DRNG support Stephan Müller 2020-01-15 10:33 ` [PATCH v28 05/12] crypto: DRBG - externalize DRBG functions for LRNG Stephan Müller 2020-01-15 10:33 ` [PATCH v28 06/12] LRNG - add SP800-90A DRBG extension Stephan Müller 2020-01-16 0:14 ` Randy Dunlap 2020-01-16 6:55 ` Stephan Mueller 2020-01-15 10:34 ` [PATCH v28 07/12] LRNG - add kernel crypto API PRNG extension Stephan Müller 2020-01-16 0:15 ` Randy Dunlap 2020-01-16 6:54 ` Stephan Mueller 2020-01-15 10:34 ` [PATCH v28 08/12] crypto: provide access to a static Jitter RNG state Stephan Müller 2020-01-15 10:34 ` [PATCH v28 09/12] LRNG - add Jitter RNG fast noise source Stephan Müller 2020-01-16 0:17 ` Randy Dunlap 2020-01-16 6:51 ` Stephan Mueller 2020-01-15 10:35 ` [PATCH v28 10/12] LRNG - add SP800-90B compliant health tests Stephan Müller 2020-01-15 10:35 ` [PATCH v28 11/12] LRNG - add interface for gathering of raw entropy Stephan Müller 2020-01-16 0:18 ` Randy Dunlap 2020-01-16 6:43 ` Stephan Mueller 2020-01-16 6:48 ` Randy Dunlap 2020-01-16 6:52 ` Stephan Mueller 2020-01-15 10:36 ` [PATCH v28 12/12] LRNG - add power-on and runtime self-tests Stephan Müller 2020-01-19 21:12 ` [PATCH v29 00/12] /dev/random - a new approach with full SP800-90B Stephan Müller 2020-01-19 21:13 ` [PATCH v29 01/12] Linux Random Number Generator Stephan Müller 2020-01-19 21:13 ` [PATCH v29 02/12] LRNG - allocate one DRNG instance per NUMA node Stephan Müller 2020-01-19 21:14 ` [PATCH v29 03/12] LRNG - sysctls and /proc interface Stephan Müller 2020-01-19 21:14 ` [PATCH v29 04/12] LRNG - add switchable DRNG support Stephan Müller 2020-01-19 21:15 ` [PATCH v29 05/12] crypto: DRBG - externalize DRBG functions for LRNG Stephan Müller 2020-01-19 21:16 ` [PATCH v29 06/12] LRNG - add SP800-90A DRBG extension Stephan Müller 2020-01-19 21:16 ` [PATCH v29 07/12] LRNG - add kernel crypto API PRNG extension Stephan Müller 2020-01-19 21:17 ` [PATCH v29 08/12] crypto: provide access to a static Jitter RNG state Stephan Müller 2020-01-19 21:18 ` [PATCH v29 09/12] LRNG - add Jitter RNG fast noise source Stephan Müller 2020-01-19 21:18 ` [PATCH v29 10/12] LRNG - add SP800-90B compliant health tests Stephan Müller 2020-01-19 21:19 ` [PATCH v29 11/12] LRNG - add interface for gathering of raw entropy Stephan Müller 2020-01-19 21:20 ` [PATCH v29 12/12] LRNG - add power-on and runtime self-tests Stephan Müller
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=cd9e893a-ce63-4e9a-fc19-553b1c5f1cff@infradead.org \ --to=rdunlap@infradead.org \ --cc=adilger.kernel@dilger.ca \ --cc=arnd@arndb.de \ --cc=darwish.07@gmail.com \ --cc=draht@schaltsekun.de \ --cc=ebiederm@xmission.com \ --cc=fweimer@redhat.com \ --cc=gregkh@linuxfoundation.org \ --cc=jack@suse.cz \ --cc=julia.lawall@inria.fr \ --cc=linux-api@vger.kernel.org \ --cc=linux-crypto@vger.kernel.org \ --cc=linux-kernel@vger.kernel.org \ --cc=luto@kernel.org \ --cc=marcelo.cerri@canonical.com \ --cc=matthias.peter@bsi.bund.de \ --cc=mccann@jhu.edu \ --cc=mjg59@srcf.ucam.org \ --cc=mzxreary@0pointer.de \ --cc=nhorman@redhat.com \ --cc=nstange@suse.de \ --cc=patrakov@gmail.com \ --cc=rstrode@redhat.com \ --cc=smueller@chronox.de \ --cc=tytso@mit.edu \ --cc=vcaputo@pengaru.com \ --cc=w@1wt.eu \ --cc=zachary@baishancloud.com \ --subject='Re: [PATCH v27 10/12] LRNG - add SP800-90B compliant health tests' \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).