Skip to content
Commit 39a8883a authored by Theodore Ts'o's avatar Theodore Ts'o
Browse files

random: add a config option to trust the CPU's hwrng



This gives the user building their own kernel (or a Linux
distribution) the option of deciding whether or not to trust the CPU's
hardware random number generator (e.g., RDRAND for x86 CPU's) as being
correctly implemented and not having a back door introduced (perhaps
courtesy of a Nation State's law enforcement or intelligence
agencies).

This will prevent getrandom(2) from blocking, if there is a
willingness to trust the CPU manufacturer.

Signed-off-by: default avatarTheodore Ts'o <tytso@mit.edu>
parent 3672476e
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment