freebsd-dev/sys
Conrad Meyer 58900beed3 random(4): Discard low entropy inputs
The later fields of the harvest_event structure are predictable and provide
little value to the entropy pool.  Only feed in the relatively high entropy
counter and explicit entropy buffer to increase measured input entropy.

See also:
https://people.freebsd.org/~jmg/vbsdcon_2017_ddfreebsdrng_slides.pdf

PR:		222807
Submitted by:	W. Dean Freeman <badfilemagic AT gmail.com>
Reviewed by:	jmg (earlier version), delphij
Approved by:	secteam (delphij)
Obtained from:	HBSD 8d809124d563937edd84c9c9d5494406e359c55c
Security:	no -- low entropy marginal input has no known negative affect on pool quality
Differential Revision:	https://reviews.freebsd.org/D12610
2017-10-06 18:27:55 +00:00
..
amd64 amd64: remove unused variable from pmap_delayed_invl_genp 2017-10-05 18:51:48 +00:00
arm Oversight on armv7 bulk commit: Make MACHINE_ARCH be armv7 for new 2017-10-06 13:43:16 +00:00
arm64 Add a memory barrier to ensure the atomic write is visible to the other 2017-10-02 14:22:35 +00:00
boot Encapsulate ZFS preferences into efi_zfs_is_preferred 2017-10-06 12:21:46 +00:00
bsm Commit the 64-bit inode project. 2017-05-23 09:29:05 +00:00
cam Fix iSCSI target panics on concurrent session teardown and display 2017-10-04 11:35:04 +00:00
cddl MFV r322235: 8067 zdb should be able to dump literal embedded block pointer 2017-10-06 08:21:06 +00:00
compat Add get_random_{int,long} to the LinuxKPI. 2017-10-04 17:29:08 +00:00
conf Tag all armv7 kernels as such in their machine config line. 2017-10-05 23:01:50 +00:00
contrib Revert r324109. This commit broke a number of systems. 2017-09-30 20:28:50 +00:00
crypto aesni(4): CRYPTO_AES_NIST_GCM_16 mandates MAC 2017-10-04 21:15:45 +00:00
ddb Rename mkdumpheader() and group EKCD functions in kern_shutdown.c. 2017-08-18 04:04:09 +00:00
dev random(4): Discard low entropy inputs 2017-10-06 18:27:55 +00:00
fs Add Flex File Layout support to the NFSv4.1 pNFS client. 2017-10-05 20:10:40 +00:00
gdb
geom Display rotation rate and TRIM/UNMAP support in diskinfo(8) 2017-10-04 15:09:49 +00:00
gnu Update DTS files from Linux 4.12 2017-07-09 13:53:32 +00:00
i386 Improve i386_get_ldt(). 2017-10-06 14:29:53 +00:00
isa Use better hard-coded defaults for the cursor shape, and remove nearby 2017-08-19 19:33:16 +00:00
kern vfs_export_lookup: Fix r324054 2017-10-06 09:02:36 +00:00
kgssapi
libkern Continuing efforts to provide hardening of FFS, this change adds a 2017-09-22 12:45:15 +00:00
mips bhnd: Add support for supplying bus I/O callbacks when initializing an EROM 2017-09-27 19:48:34 +00:00
modules Support armv7 builds for userland 2017-10-05 23:01:33 +00:00
net Fix "taskqgroup_attach: setaffinity failed: 3" with iflib drivers 2017-10-05 14:43:30 +00:00
net80211 net80211: fix a typo (premable -> preamble). 2017-08-27 22:13:03 +00:00
netgraph Correction after r323873: #include <sys/lock.h> in addition to <sys/rmlock.h> 2017-09-28 11:26:37 +00:00
netinet Ensure that the accept ABORT chunks with the T-bit set only the 2017-10-05 13:29:54 +00:00
netinet6 Hide struct socket and struct unpcb from the userland. 2017-10-02 23:29:56 +00:00
netipsec opencrypto: Loosen restriction on HMAC key sizes 2017-09-26 16:18:10 +00:00
netpfil Fix a bug which avoided that rules for matching port numbers for SCTP 2017-10-02 18:25:30 +00:00
netsmb netsmb: Fix buggy/racy smb_strdupin() 2017-09-29 15:53:26 +00:00
nfs Improve FHA locality control for NFS read/write requests. 2017-07-31 15:23:19 +00:00
nfsclient Add an NFSv4.1 mount option for "use one openowner". 2017-04-13 21:54:19 +00:00
nfsserver
nlm Commit the 64-bit inode project. 2017-05-23 09:29:05 +00:00
ofed Remove unsafe access to the LinuxKPI file structure from ibcore. 2017-09-09 06:34:20 +00:00
opencrypto opencrypto: Use C99 initializers for auth_hash instances 2017-09-26 17:52:52 +00:00
powerpc PPC: increase MAX_PICS to 32 2017-10-02 06:05:19 +00:00
riscv Sync with amd64/arm/arm64/i386/mips pmap change r288256: 2017-09-20 04:19:49 +00:00
rpc Listening sockets improvements. 2017-06-08 21:30:34 +00:00
security Sprinkle __read_frequently on few obvious places. 2017-09-06 20:33:33 +00:00
sparc64 Fix indentation for r323068 2017-09-19 20:40:05 +00:00
sys Add updating for armv7 and bump FreeBSD_version. 2017-10-05 23:05:56 +00:00
teken Fix syscons escape sequence for setting the local cursor type. This sequence 2017-08-18 15:40:40 +00:00
tests style(9): sort headers 2017-05-09 05:08:47 +00:00
tools make.conf: Add the possibility to use another DTC 2017-06-17 23:34:53 +00:00
ufs Don't defer wakeup()s for completed journal workitems. 2017-09-26 23:24:15 +00:00
vm When an I/O error occurs on page out, there is no need to dirty the page, 2017-10-01 17:04:26 +00:00
x86 x86: Decode AMD "Extended Feature Extensions ID EBX" bits 2017-09-20 18:30:37 +00:00
xdr * limit size of buffers to RPC_MAXDATASIZE 2017-06-01 06:12:25 +00:00
xen
Makefile Remove glimpse make target added in r181432 2017-05-22 15:53:30 +00:00