Re: random numbers for efiboot

2018-04-08 Thread Mark Kettenis
> From: "Theo de Raadt" > Date: Sat, 07 Apr 2018 15:26:30 -0600 > > Mark Kettenis wrote: > > > The UEFI firmware for the MACCHIATObin implements the EFI Random > > Number Generator Protocol. That makes it possible to implement the > > mdrandom() function for arm64's EFIBOOT. The random data i

Re: random numbers for efiboot

2018-04-07 Thread Theo de Raadt
Mark Kettenis wrote: > The UEFI firmware for the MACCHIATObin implements the EFI Random > Number Generator Protocol. That makes it possible to implement the > mdrandom() function for arm64's EFIBOOT. The random data is XORed > onto the buffer so bad random data can't hurt us. > > The code is w

random numbers for efiboot

2018-04-07 Thread Mark Kettenis
The UEFI firmware for the MACCHIATObin implements the EFI Random Number Generator Protocol. That makes it possible to implement the mdrandom() function for arm64's EFIBOOT. The random data is XORed onto the buffer so bad random data can't hurt us. The code is written such that it can be easily d