From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org, Thomas Gleixner <tglx@linutronix.de>,
Filipe Manana <fdmanana@suse.com>,
Peter Zijlstra <peterz@infradead.org>,
Borislav Petkov <bp@alien8.de>, Theodore Tso <tytso@mit.edu>,
"Jason A. Donenfeld" <Jason@zx2c4.com>
Subject: [PATCH 5.10 142/163] random: do not use input pool from hard IRQs
Date: Fri, 27 May 2022 10:50:22 +0200 [thread overview]
Message-ID: <20220527084848.047372120@linuxfoundation.org> (raw)
In-Reply-To: <20220527084828.156494029@linuxfoundation.org>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
commit e3e33fc2ea7fcefd0d761db9d6219f83b4248f5c upstream.
Years ago, a separate fast pool was added for interrupts, so that the
cost associated with taking the input pool spinlocks and mixing into it
would be avoided in places where latency is critical. However, one
oversight was that add_input_randomness() and add_disk_randomness()
still sometimes are called directly from the interrupt handler, rather
than being deferred to a thread. This means that some unlucky interrupts
will be caught doing a blake2s_compress() call and potentially spinning
on input_pool.lock, which can also be taken by unprivileged users by
writing into /dev/urandom.
In order to fix this, add_timer_randomness() now checks whether it is
being called from a hard IRQ and if so, just mixes into the per-cpu IRQ
fast pool using fast_mix(), which is much faster and can be done
lock-free. A nice consequence of this, as well, is that it means hard
IRQ context FPU support is likely no longer useful.
The entropy estimation algorithm used by add_timer_randomness() is also
somewhat different than the one used for add_interrupt_randomness(). The
former looks at deltas of deltas of deltas, while the latter just waits
for 64 interrupts for one bit or for one second since the last bit. In
order to bridge these, and since add_interrupt_randomness() runs after
an add_timer_randomness() that's called from hard IRQ, we add to the
fast pool credit the related amount, and then subtract one to account
for add_interrupt_randomness()'s contribution.
A downside of this, however, is that the num argument is potentially
attacker controlled, which puts a bit more pressure on the fast_mix()
sponge to do more than it's really intended to do. As a mitigating
factor, the first 96 bits of input aren't attacker controlled (a cycle
counter followed by zeros), which means it's essentially two rounds of
siphash rather than one, which is somewhat better. It's also not that
much different from add_interrupt_randomness()'s use of the irq stack
instruction pointer register.
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Filipe Manana <fdmanana@suse.com>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Theodore Ts'o <tytso@mit.edu>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
drivers/char/random.c | 51 +++++++++++++++++++++++++++++++++++---------------
1 file changed, 36 insertions(+), 15 deletions(-)
--- a/drivers/char/random.c
+++ b/drivers/char/random.c
@@ -1086,6 +1086,7 @@ static void mix_interrupt_randomness(str
* we don't wind up "losing" some.
*/
unsigned long pool[2];
+ unsigned int count;
/* Check to see if we're running on the wrong CPU due to hotplug. */
local_irq_disable();
@@ -1099,12 +1100,13 @@ static void mix_interrupt_randomness(str
* consistent view, before we reenable irqs again.
*/
memcpy(pool, fast_pool->pool, sizeof(pool));
+ count = fast_pool->count;
fast_pool->count = 0;
fast_pool->last = jiffies;
local_irq_enable();
mix_pool_bytes(pool, sizeof(pool));
- credit_init_bits(1);
+ credit_init_bits(max(1u, (count & U16_MAX) / 64));
memzero_explicit(pool, sizeof(pool));
}
@@ -1144,22 +1146,30 @@ struct timer_rand_state {
/*
* This function adds entropy to the entropy "pool" by using timing
- * delays. It uses the timer_rand_state structure to make an estimate
- * of how many bits of entropy this call has added to the pool.
- *
- * The number "num" is also added to the pool - it should somehow describe
- * the type of event which just happened. This is currently 0-255 for
- * keyboard scan codes, and 256 upwards for interrupts.
+ * delays. It uses the timer_rand_state structure to make an estimate
+ * of how many bits of entropy this call has added to the pool. The
+ * value "num" is also added to the pool; it should somehow describe
+ * the type of event that just happened.
*/
static void add_timer_randomness(struct timer_rand_state *state, unsigned int num)
{
unsigned long entropy = random_get_entropy(), now = jiffies, flags;
long delta, delta2, delta3;
+ unsigned int bits;
- spin_lock_irqsave(&input_pool.lock, flags);
- _mix_pool_bytes(&entropy, sizeof(entropy));
- _mix_pool_bytes(&num, sizeof(num));
- spin_unlock_irqrestore(&input_pool.lock, flags);
+ /*
+ * If we're in a hard IRQ, add_interrupt_randomness() will be called
+ * sometime after, so mix into the fast pool.
+ */
+ if (in_irq()) {
+ fast_mix(this_cpu_ptr(&irq_randomness)->pool,
+ (unsigned long[2]){ entropy, num });
+ } else {
+ spin_lock_irqsave(&input_pool.lock, flags);
+ _mix_pool_bytes(&entropy, sizeof(entropy));
+ _mix_pool_bytes(&num, sizeof(num));
+ spin_unlock_irqrestore(&input_pool.lock, flags);
+ }
if (crng_ready())
return;
@@ -1190,11 +1200,22 @@ static void add_timer_randomness(struct
delta = delta3;
/*
- * delta is now minimum absolute delta.
- * Round down by 1 bit on general principles,
- * and limit entropy estimate to 12 bits.
+ * delta is now minimum absolute delta. Round down by 1 bit
+ * on general principles, and limit entropy estimate to 11 bits.
+ */
+ bits = min(fls(delta >> 1), 11);
+
+ /*
+ * As mentioned above, if we're in a hard IRQ, add_interrupt_randomness()
+ * will run after this, which uses a different crediting scheme of 1 bit
+ * per every 64 interrupts. In order to let that function do accounting
+ * close to the one in this function, we credit a full 64/64 bit per bit,
+ * and then subtract one to account for the extra one added.
*/
- credit_init_bits(min_t(unsigned int, fls(delta >> 1), 11));
+ if (in_irq())
+ this_cpu_ptr(&irq_randomness)->count += max(1u, bits * 64) - 1;
+ else
+ credit_init_bits(bits);
}
void add_input_randomness(unsigned int type, unsigned int code,
next prev parent reply other threads:[~2022-05-27 12:17 UTC|newest]
Thread overview: 177+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-05-27 8:48 [PATCH 5.10 000/163] 5.10.119-rc1 review Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 001/163] lockdown: also lock down previous kgdb use Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 002/163] staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 003/163] KVM: x86: Properly handle APF vs disabled LAPIC situation Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 004/163] KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 005/163] tcp: change source port randomizarion at connect() time Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 006/163] secure_seq: use the 64 bits of the siphash for port offset calculation Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 007/163] media: vim2m: Register video device after setting up internals Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 008/163] media: vim2m: initialize the media device earlier Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 009/163] ACPI: sysfs: Make sparse happy about address space in use Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 010/163] ACPI: sysfs: Fix BERT error region memory mapping Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 011/163] random: avoid arch_get_random_seed_long() when collecting IRQ randomness Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 012/163] random: remove dead code left over from blocking pool Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 013/163] MAINTAINERS: co-maintain random.c Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 014/163] MAINTAINERS: add git tree for random.c Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 015/163] crypto: lib/blake2s - Move selftest prototype into header file Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 016/163] crypto: blake2s - define shash_alg structs using macros Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 017/163] crypto: x86/blake2s " Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 018/163] crypto: blake2s - remove unneeded includes Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 019/163] crypto: blake2s - move update and final logic to internal/blake2s.h Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 020/163] crypto: blake2s - share the "shash" API boilerplate code Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 021/163] crypto: blake2s - optimize blake2s initialization Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 022/163] crypto: blake2s - add comment for blake2s_state fields Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 023/163] crypto: blake2s - adjust include guard naming Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 024/163] crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 025/163] lib/crypto: blake2s: include as built-in Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 026/163] lib/crypto: blake2s: move hmac construction into wireguard Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 027/163] lib/crypto: sha1: re-roll loops to reduce code size Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 028/163] lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 029/163] random: document add_hwgenerator_randomness() with other input functions Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 030/163] random: remove unused irq_flags argument from add_interrupt_randomness() Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 031/163] random: use BLAKE2s instead of SHA1 in extraction Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 032/163] random: do not sign extend bytes for rotation when mixing Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 033/163] random: do not re-init if crng_reseed completes before primary init Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 034/163] random: mix bootloader randomness into pool Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 035/163] random: harmonize "crng init done" messages Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 036/163] random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 037/163] random: early initialization of ChaCha constants Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 038/163] random: avoid superfluous call to RDRAND in CRNG extraction Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 039/163] random: dont reset crng_init_cnt on urandom_read() Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 040/163] random: fix typo in comments Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 041/163] random: cleanup poolinfo abstraction Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 042/163] random: cleanup integer types Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 043/163] random: remove incomplete last_data logic Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 044/163] random: remove unused extract_entropy() reserved argument Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 045/163] random: rather than entropy_store abstraction, use global Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 046/163] random: remove unused OUTPUT_POOL constants Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 047/163] random: de-duplicate INPUT_POOL constants Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 049/163] random: cleanup fractional entropy shift constants Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 050/163] random: access input_pool_data directly rather than through pointer Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 051/163] random: selectively clang-format where it makes sense Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 052/163] random: simplify arithmetic function flow in account() Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 053/163] random: continually use hwgenerator randomness Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 054/163] random: access primary_pool directly rather than through pointer Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 055/163] random: only call crng_finalize_init() for primary_crng Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 056/163] random: use computational hash for entropy extraction Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 057/163] random: simplify entropy debiting Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 058/163] random: use linear min-entropy accumulation crediting Greg Kroah-Hartman
2022-05-27 8:48 ` [PATCH 5.10 059/163] random: always wake up entropy writers after extraction Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 060/163] random: make credit_entropy_bits() always safe Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 061/163] random: remove use_input_pool parameter from crng_reseed() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 062/163] random: remove batched entropy locking Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 063/163] random: fix locking in crng_fast_load() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 064/163] random: use RDSEED instead of RDRAND in entropy extraction Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 065/163] random: get rid of secondary crngs Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 066/163] random: inline leaves of rand_initialize() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 067/163] random: ensure early RDSEED goes through mixer on init Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 068/163] random: do not xor RDRAND when writing into /dev/random Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 069/163] random: absorb fast pool into input pool after fast load Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 070/163] random: use simpler fast key erasure flow on per-cpu keys Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 071/163] random: use hash function for crng_slow_load() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 072/163] random: make more consistent use of integer types Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 073/163] random: remove outdated INT_MAX >> 6 check in urandom_read() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 074/163] random: zero buffer after reading entropy from userspace Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 075/163] random: fix locking for crng_init in crng_reseed() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 076/163] random: tie batched entropy generation to base_crng generation Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 077/163] random: remove ifdefd out interrupt bench Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 078/163] random: remove unused tracepoints Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 079/163] random: add proper SPDX header Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 080/163] random: deobfuscate irq u32/u64 contributions Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 081/163] random: introduce drain_entropy() helper to declutter crng_reseed() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 082/163] random: remove useless header comment Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 083/163] random: remove whitespace and reorder includes Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 084/163] random: group initialization wait functions Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 085/163] random: group crng functions Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 086/163] random: group entropy extraction functions Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 087/163] random: group entropy collection functions Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 088/163] random: group userspace read/write functions Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 089/163] random: group sysctl functions Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 090/163] random: rewrite header introductory comment Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 091/163] random: defer fast pool mixing to worker Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 092/163] random: do not take pool spinlock at boot Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 093/163] random: unify early init crng load accounting Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 094/163] random: check for crng_init == 0 in add_device_randomness() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 095/163] random: pull add_hwgenerator_randomness() declaration into random.h Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 096/163] random: clear fast pool, crng, and batches in cpuhp bring up Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 097/163] random: round-robin registers as ulong, not u32 Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 098/163] random: only wake up writers after zap if threshold was passed Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 099/163] random: cleanup UUID handling Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 100/163] random: unify cycles_t and jiffies usage and types Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 101/163] random: do crng pre-init loading in worker rather than irq Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 102/163] random: give sysctl_random_min_urandom_seed a more sensible value Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 103/163] random: dont let 644 read-only sysctls be written to Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 104/163] random: replace custom notifier chain with standard one Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 105/163] random: use SipHash as interrupt entropy accumulator Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 106/163] random: make consistent usage of crng_ready() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 107/163] random: reseed more often immediately after booting Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 108/163] random: check for signal and try earlier when generating entropy Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 109/163] random: skip fast_init if hwrng provides large chunk of entropy Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 110/163] random: treat bootloader trust toggle the same way as cpu trust toggle Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 111/163] random: re-add removed comment about get_random_{u32,u64} reseeding Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 112/163] random: mix build-time latent entropy into pool at init Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 113/163] random: do not split fast init input in add_hwgenerator_randomness() Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 114/163] random: do not allow user to keep crng key around on stack Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 115/163] random: check for signal_pending() outside of need_resched() check Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 116/163] random: check for signals every PAGE_SIZE chunk of /dev/[u]random Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 117/163] random: allow partial reads if later user copies fail Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 118/163] random: make random_get_entropy() return an unsigned long Greg Kroah-Hartman
2022-05-27 8:49 ` [PATCH 5.10 119/163] random: document crng_fast_key_erasure() destination possibility Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 120/163] random: fix sysctl documentation nits Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 121/163] init: call time_init() before rand_initialize() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 122/163] ia64: define get_cycles macro for arch-override Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 123/163] s390: " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 124/163] parisc: " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 125/163] alpha: " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 126/163] powerpc: " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 127/163] timekeeping: Add raw clock fallback for random_get_entropy() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 128/163] m68k: use fallback for random_get_entropy() instead of zero Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 129/163] riscv: " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 130/163] mips: use fallback for random_get_entropy() instead of just c0 random Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 131/163] arm: use fallback for random_get_entropy() instead of zero Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 132/163] nios2: " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 133/163] x86/tsc: Use " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 134/163] um: use " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 135/163] sparc: " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 136/163] xtensa: " Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 137/163] random: insist on random_get_entropy() existing in order to simplify Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 138/163] random: do not use batches when !crng_ready() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 139/163] random: use first 128 bits of input as fast init Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 140/163] random: do not pretend to handle premature next security model Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 141/163] random: order timer entropy functions below interrupt functions Greg Kroah-Hartman
2022-05-27 8:50 ` Greg Kroah-Hartman [this message]
2022-05-27 8:50 ` [PATCH 5.10 143/163] random: help compiler out with fast_mix() by using simpler arguments Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 144/163] siphash: use one source of truth for siphash permutations Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 145/163] random: use symbolic constants for crng_init states Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 146/163] random: avoid initializing twice in credit race Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 147/163] random: move initialization out of reseeding hot path Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 148/163] random: remove ratelimiting for in-kernel unseeded randomness Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 149/163] random: use proper jiffies comparison macro Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 150/163] random: handle latent entropy and command line from random_init() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 151/163] random: credit architectural init the exact amount Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 152/163] random: use static branch for crng_ready() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 153/163] random: remove extern from functions in header Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 154/163] random: use proper return types on get_random_{int,long}_wait() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 155/163] random: make consistent use of buf and len Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 156/163] random: move initialization functions out of hot pages Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 157/163] random: move randomize_page() into mm where it belongs Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 158/163] random: unify batched entropy implementations Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 159/163] random: convert to using fops->read_iter() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 160/163] random: convert to using fops->write_iter() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 161/163] random: wire up fops->splice_{read,write}_iter() Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 162/163] random: check for signals after page of pool writes Greg Kroah-Hartman
2022-05-27 8:50 ` [PATCH 5.10 163/163] ALSA: ctxfi: Add SB046x PCI ID Greg Kroah-Hartman
2022-05-27 14:14 ` [PATCH 5.10 000/163] 5.10.119-rc1 review Pavel Machek
2022-05-27 15:53 ` Greg Kroah-Hartman
2022-05-27 16:59 ` Guenter Roeck
2022-05-27 17:39 ` Guenter Roeck
2022-05-27 21:10 ` Jason A. Donenfeld
2022-05-27 22:38 ` Guenter Roeck
2022-05-28 6:03 ` Jason A. Donenfeld
2022-05-27 21:04 ` Jason A. Donenfeld
2022-06-01 6:13 ` Chris Paterson
2022-05-27 22:38 ` Guenter Roeck
2022-05-28 11:07 ` Naresh Kamboju
2022-05-28 15:29 ` Sudip Mukherjee
2022-05-28 22:24 ` Fox Chen
2022-05-30 1:09 ` Samuel Zou
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20220527084848.047372120@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=Jason@zx2c4.com \
--cc=bp@alien8.de \
--cc=fdmanana@suse.com \
--cc=linux-kernel@vger.kernel.org \
--cc=peterz@infradead.org \
--cc=stable@vger.kernel.org \
--cc=tglx@linutronix.de \
--cc=tytso@mit.edu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.