Page MenuHomeFreeBSD

random: remove safe(4)
Needs ReviewPublic

Authored by obrien on Sat, Oct 18, 1:36 AM.

Details

Reviewers
None
Group Reviewers
csprng
Summary

The SafeNet SafeXcel 1141/1741 crypto accelerator only supports
deprecated & disallowed algorithms: DES, Triple-DES, AES, MD5, SHA-1,
SHA1-HMAC, and non-SP800-90B RNG.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 67893
Build 64776: arc lint + arc unit

Event Timeline

I could only find PCI cards with this chipset (SafeXcel 140-PCI, SafeXcel 141-PCI, SafeXcel 171-PCI, and SafeXcel 241-PCI), nothing newer to plug into a modern AMD64 system. I haven't yet found any(which) SoC's may have the SafeXcel embedded, but I doubt they are 64-bit capable.

Hm, not sure I'd call AES deprecated or disallowed. But no objection to removing.

sys/sys/random.h
93

I think this is an ABI change, and requires the usual ABI bump machinery / caution.