NetBSD/sys/arch/mips
tls 3afd44cf08 First step of random number subsystem rework described in
<20111022023242.BA26F14A158@mail.netbsd.org>.  This change includes
the following:

	An initial cleanup and minor reorganization of the entropy pool
	code in sys/dev/rnd.c and sys/dev/rndpool.c.  Several bugs are
	fixed.  Some effort is made to accumulate entropy more quickly at
	boot time.

	A generic interface, "rndsink", is added, for stream generators to
	request that they be re-keyed with good quality entropy from the pool
	as soon as it is available.

	The arc4random()/arc4randbytes() implementation in libkern is
	adjusted to use the rndsink interface for rekeying, which helps
	address the problem of low-quality keys at boot time.

	An implementation of the FIPS 140-2 statistical tests for random
	number generator quality is provided (libkern/rngtest.c).  This
	is based on Greg Rose's implementation from Qualcomm.

	A new random stream generator, nist_ctr_drbg, is provided.  It is
	based on an implementation of the NIST SP800-90 CTR_DRBG by
	Henric Jungheim.  This generator users AES in a modified counter
	mode to generate a backtracking-resistant random stream.

	An abstraction layer, "cprng", is provided for in-kernel consumers
	of randomness.  The arc4random/arc4randbytes API is deprecated for
	in-kernel use.  It is replaced by "cprng_strong".  The current
	cprng_fast implementation wraps the existing arc4random
	implementation.  The current cprng_strong implementation wraps the
	new CTR_DRBG implementation.  Both interfaces are rekeyed from
	the entropy pool automatically at intervals justifiable from best
	current cryptographic practice.

	In some quick tests, cprng_fast() is about the same speed as
	the old arc4randbytes(), and cprng_strong() is about 20% faster
	than rnd_extract_data().  Performance is expected to improve.

	The AES code in src/crypto/rijndael is no longer an optional
	kernel component, as it is required by cprng_strong, which is
	not an optional kernel component.

	The entropy pool output is subjected to the rngtest tests at
	startup time; if it fails, the system will reboot.  There is
	approximately a 3/10000 chance of a false positive from these
	tests.  Entropy pool _input_ from hardware random numbers is
	subjected to the rngtest tests at attach time, as well as the
	FIPS continuous-output test, to detect bad or stuck hardware
	RNGs; if any are detected, they are detached, but the system
	continues to run.

	A problem with rndctl(8) is fixed -- datastructures with
	pointers in arrays are no longer passed to userspace (this
	was not a security problem, but rather a major issue for
	compat32).  A new kernel will require a new rndctl.

	The sysctl kern.arandom() and kern.urandom() nodes are hooked
	up to the new generators, but the /dev/*random pseudodevices
	are not, yet.

	Manual pages for the new kernel interfaces are forthcoming.
2011-11-19 22:51:18 +00:00
..
adm5120 Fix machine/ includes 2011-07-10 23:13:22 +00:00
alchemy First step of random number subsystem rework described in 2011-11-19 22:51:18 +00:00
atheros First step of random number subsystem rework described in 2011-11-19 22:51:18 +00:00
bonito Loongson2f support: 2011-08-27 12:59:16 +00:00
cfe
conf Add support for the MIPS DSP ASE (as a second PCU). 2011-08-16 06:58:15 +00:00
include Don't redefine _C_LABEL. 2011-11-10 00:37:38 +00:00
mips Read-modify-write instead of read-modify-read. (not sure if this was fatal) 2011-11-13 15:57:57 +00:00
pci Add a common version of this for those port which use the generic mips 2011-07-09 15:57:39 +00:00
pmon Add pmon (firmware used by loongson2-based systems and maybe others) support, 2011-08-27 13:34:29 +00:00
ralink Modify *ASSERTMSG() so they are now used as variadic macros. The main goal 2011-09-27 01:02:33 +00:00
rmi Modify *ASSERTMSG() so they are now used as variadic macros. The main goal 2011-09-27 01:02:33 +00:00
sibyte First step of random number subsystem rework described in 2011-11-19 22:51:18 +00:00
Makefile
Makefile.inc