Page MenuHomeFreeBSD

tpm20: Preserve all harvested random bytes
Needs ReviewPublic

Authored by kbowling on Fri, Aug 28, 1:45 AM.
Tags
None
Referenced Files
F170955399: D59246.id185303.diff
Mon, Sep 7, 8:32 PM
F170884642: D59246.id.diff
Mon, Sep 7, 7:27 AM
F170837016: D59246.id185303.diff
Sun, Sep 6, 10:57 PM
Unknown Object (File)
Sun, Sep 6, 4:17 AM
Unknown Object (File)
Sun, Sep 6, 1:59 AM
Unknown Object (File)
Sat, Sep 5, 6:31 PM
Unknown Object (File)
Sat, Sep 5, 4:53 PM
Unknown Object (File)
Sat, Sep 5, 7:36 AM
Subscribers

Details

Reviewers
markj
kevans
seuros
Group Reviewers
csprng
Summary
The TPM requests 16 random bytes every ten seconds, but a random
harvest event retains at most eight bytes.  random_harvest_queue()
reduces a larger input to one 32-bit Jenkins hash, so each successful
TPM request contributed only four bytes to the entropy accumulator.

Split the response into harvest-event-sized chunks.  This preserves all
16 random bytes without increasing the TPM command rate or changing its
high-quality source classification.

MFC after:      2 weeks

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped