freebsd-dev/sys/modules/random/Makefile

# $FreeBSD$

.PATH:	${.CURDIR}/../../dev/random
.PATH:	${.CURDIR}/../../crypto/blowfish
KMOD	= random
SRCS	= bus_if.h device_if.h randomdev.c yarrow.c hash.c
SRCS	+= bf_cbc.c bf_skey.c bf_enc.c
SRCS	+= vnode_if.h opt_noblockrandom.h
CFLAGS	+= -I${.CURDIR}/../..
NOMAN	= yes

NOBLOCKRANDOM=	yes
.if defined(NOBLOCKRANDOM)
RANDOM_OPTS=     "\#define NOBLOCKRANDOM"
.endif

opt_noblockrandom.h:
	touch opt_noblockrandom.h
	echo $(RANDOM_OPTS) >> opt_noblockrandom.h

.include <bsd.kmod.mk>
Build the entropy device (/dev/random) as a module. This may not be a permanent rule, because this device may eventually be deemed "effectively compulsory", and built by default directly into the kernel. For the moment, however, this is useful for debugging and development. Reviewed by: dfr 2000-06-25 10:12:33 +00:00			`# $FreeBSD$`

After some complaints about the dir names, the random device is now in dirs called sys//random/ instead of sys//randomdev/*. Introduce blocking, but only at startup; the random device will block until the first reseed happens to prevent clients from using untrustworthy output. Provide a read_random() call for the rest of the kernel so that the entropy device does not need to be present. This means that things like IPX no longer need to have "device random" hardcoded into thir kernel config. The downside is that read_random() will provide very poor output until the entropy device is loaded and reseeded. It is recommended that developers do NOT use the read_random() call; instead, they should use arc4random() which internally uses read_random(). Clean up the mutex and locking code a bit; this makes it possible to unload the module again. 2000-10-14 10:59:56 +00:00			`.PATH: ${.CURDIR}/../../dev/random`
Build the entropy device (/dev/random) as a module. This may not be a permanent rule, because this device may eventually be deemed "effectively compulsory", and built by default directly into the kernel. For the moment, however, this is useful for debugging and development. Reviewed by: dfr 2000-06-25 10:12:33 +00:00			`.PATH: ${.CURDIR}/../../crypto/blowfish`
Large upgrade to the entropy device; mainly inspired by feedback from many folk. o The reseed process is now a kthread. With SMPng, kthreads are pre-emptive, so the annoying jerkiness of the mouse is gone. o The data structures are protected by mutexes now, not splfoo()/splx(). o The cryptographic routines are broken out into their own subroutines. this facilitates review, and possible replacement if that is ever found necessary. Thanks to: kris, green, peter, jasone, grog, jhb Forgotten to thank: You know who you are; no offense intended. 2000-09-10 13:52:19 +00:00			`KMOD = random`
			`SRCS = bus_if.h device_if.h randomdev.c yarrow.c hash.c`
Build the entropy device (/dev/random) as a module. This may not be a permanent rule, because this device may eventually be deemed "effectively compulsory", and built by default directly into the kernel. For the moment, however, this is useful for debugging and development. Reviewed by: dfr 2000-06-25 10:12:33 +00:00			`SRCS += bf_cbc.c bf_skey.c bf_enc.c`
As the blocking model has seems to be troublesome for many, disable it for now with an option. This option is already deprecated, and will be removed when the entropy-harvesting code is fast enough to warrant it. 2000-10-27 06:06:04 +00:00			`SRCS += vnode_if.h opt_noblockrandom.h`
Better style(9) for the module build. 2000-06-26 12:18:09 +00:00			`CFLAGS += -I${.CURDIR}/../..`
Build the entropy device (/dev/random) as a module. This may not be a permanent rule, because this device may eventually be deemed "effectively compulsory", and built by default directly into the kernel. For the moment, however, this is useful for debugging and development. Reviewed by: dfr 2000-06-25 10:12:33 +00:00			`NOMAN = yes`

As the blocking model has seems to be troublesome for many, disable it for now with an option. This option is already deprecated, and will be removed when the entropy-harvesting code is fast enough to warrant it. 2000-10-27 06:06:04 +00:00			`NOBLOCKRANDOM= yes`
			`.if defined(NOBLOCKRANDOM)`
			`RANDOM_OPTS= "\#define NOBLOCKRANDOM"`
			`.endif`

			`opt_noblockrandom.h:`
			`touch opt_noblockrandom.h`
			`echo $(RANDOM_OPTS) >> opt_noblockrandom.h`

Build the entropy device (/dev/random) as a module. This may not be a permanent rule, because this device may eventually be deemed "effectively compulsory", and built by default directly into the kernel. For the moment, however, this is useful for debugging and development. Reviewed by: dfr 2000-06-25 10:12:33 +00:00			`.include <bsd.kmod.mk>`