~kamalmostafa/ubuntu/+source/linux-aws/+git/disco:lp1859192/graviton-entropy

Branch merges

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

00a20e6... by Dominik Brodowski <email address hidden> on 2019-10-29

efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness

BugLink: https://bugs.launchpad.net/bugs/1859192

Commit 428826f5358c ("fdt: add support for rng-seed") introduced
add_bootloader_randomness(), permitting randomness provided by the
bootloader or firmware to be credited as entropy. However, the fact
that the UEFI support code was already wired into the RNG subsystem
via a call to add_device_randomness() was overlooked, and so it was
not converted at the same time.

Note that this UEFI (v2.4 or newer) feature is currently only
implemented for EFI stub booting on ARM, and further note that
CONFIG_RANDOM_TRUST_BOOTLOADER must be enabled, and this should be
done only if there indeed is sufficient trust in the bootloader
_and_ its source of randomness.

[ ardb: update commit log ]

Tested-by: Bhupesh Sharma <email address hidden>
Signed-off-by: Dominik Brodowski <email address hidden>
Signed-off-by: Ard Biesheuvel <email address hidden>
Cc: Linus Torvalds <email address hidden>
Cc: Peter Zijlstra <email address hidden>
Cc: Thomas Gleixner <email address hidden>
Cc: <email address hidden>
Link: https://<email address hidden>
Signed-off-by: Ingo Molnar <email address hidden>
(cherry picked from commit 18b915ac6b0ac5ba7ded03156860f60a9f16df2b)
Signed-off-by: Kamal Mostafa <email address hidden>