lkml.org 
[lkml]   [2021]   [Jun]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH v1] crypto: Make the DRBG compliant with NIST SP800-90A rev1
On Wed, 23 Jun 2021, Stephan Mueller wrote:

>
> > These changes replace the use of the Linux RNG with the Jitter RNG,
> > which is NIST SP800-90B compliant, to get a proper entropy input and a
> > nonce as defined by FIPS.
>
> Can you please help me understand what is missing in the current code which
> seemingly already has achieved this goal?

The advice we have is that if an attacker knows the internal state of the
CPU, then the output of the Jitter RNG can be predicted.



--
James Morris
<jamorris@linux.microsoft.com>

\
 
 \ /
  Last update: 2021-06-23 19:01    [W:0.067 / U:0.040 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site