lkml.org 
[lkml]   [2022]   [Jun]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 4.9 012/264] random: warn when kernel uses unseeded randomness
    Date
    From: "Jason A. Donenfeld" <Jason@zx2c4.com>

    commit d06bfd1989fe97623b32d6df4ffa6e4338c99dc8 upstream.

    This enables an important dmesg notification about when drivers have
    used the crng without it being seeded first. Prior, these errors would
    occur silently, and so there hasn't been a great way of diagnosing these
    types of bugs for obscure setups. By adding this as a config option, we
    can leave it on by default, so that we learn where these issues happen,
    in the field, will still allowing some people to turn it off, if they
    really know what they're doing and do not want the log entries.

    However, we don't leave it _completely_ by default. An earlier version
    of this patch simply had `default y`. I'd really love that, but it turns
    out, this problem with unseeded randomness being used is really quite
    present and is going to take a long time to fix. Thus, as a compromise
    between log-messages-for-all and nobody-knows, this is `default y`,
    except it is also `depends on DEBUG_KERNEL`. This will ensure that the
    curious see the messages while others don't have to.

    Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
    Signed-off-by: Theodore Ts'o <tytso@mit.edu>
    Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    ---
    drivers/char/random.c | 15 +++++++++++++--
    lib/Kconfig.debug | 16 ++++++++++++++++
    2 files changed, 29 insertions(+), 2 deletions(-)

    --- a/drivers/char/random.c
    +++ b/drivers/char/random.c
    @@ -289,7 +289,6 @@
    #define SEC_XFER_SIZE 512
    #define EXTRACT_SIZE 10

    -#define DEBUG_RANDOM_BOOT 0

    #define LONGS(x) (((x) + sizeof(unsigned long) - 1)/sizeof(unsigned long))

    @@ -1545,7 +1544,7 @@ void get_random_bytes(void *buf, int nby
    {
    __u8 tmp[CHACHA20_BLOCK_SIZE];

    -#if DEBUG_RANDOM_BOOT > 0
    +#ifdef CONFIG_WARN_UNSEEDED_RANDOM
    if (!crng_ready())
    printk(KERN_NOTICE "random: %pF get_random_bytes called "
    "with crng_init = %d\n", (void *) _RET_IP_, crng_init);
    @@ -2142,6 +2141,12 @@ u64 get_random_u64(void)
    return ret;
    #endif

    +#ifdef CONFIG_WARN_UNSEEDED_RANDOM
    + if (!crng_ready())
    + printk(KERN_NOTICE "random: %pF get_random_u64 called "
    + "with crng_init = %d\n", (void *) _RET_IP_, crng_init);
    +#endif
    +
    batch = &get_cpu_var(batched_entropy_u64);
    if (use_lock)
    read_lock_irqsave(&batched_entropy_reset_lock, flags);
    @@ -2168,6 +2173,12 @@ u32 get_random_u32(void)
    if (arch_get_random_int(&ret))
    return ret;

    +#ifdef CONFIG_WARN_UNSEEDED_RANDOM
    + if (!crng_ready())
    + printk(KERN_NOTICE "random: %pF get_random_u32 called "
    + "with crng_init = %d\n", (void *) _RET_IP_, crng_init);
    +#endif
    +
    batch = &get_cpu_var(batched_entropy_u32);
    if (use_lock)
    read_lock_irqsave(&batched_entropy_reset_lock, flags);
    --- a/lib/Kconfig.debug
    +++ b/lib/Kconfig.debug
    @@ -1177,6 +1177,22 @@ config STACKTRACE
    It is also used by various kernel debugging features that require
    stack trace generation.

    +config WARN_UNSEEDED_RANDOM
    + bool "Warn when kernel uses unseeded randomness"
    + default y
    + depends on DEBUG_KERNEL
    + help
    + Some parts of the kernel contain bugs relating to their use of
    + cryptographically secure random numbers before it's actually possible
    + to generate those numbers securely. This setting ensures that these
    + flaws don't go unnoticed, by enabling a message, should this ever
    + occur. This will allow people with obscure setups to know when things
    + are going wrong, so that they might contact developers about fixing
    + it.
    +
    + Say Y here, unless you simply do not care about using unseeded
    + randomness and do not want a potential warning message in your logs.
    +
    config DEBUG_KOBJECT
    bool "kobject debugging"
    depends on DEBUG_KERNEL

    \
     
     \ /
      Last update: 2022-06-23 18:47    [W:2.448 / U:0.160 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site