HomeFreeBSD

random(4): Flip default Fortuna generator over to Chacha20

Description

random(4): Flip default Fortuna generator over to Chacha20

The implementation was landed in r344913 and has had some bake time (at
least on my personal systems). There is some discussion of the motivation
for defaulting to this cipher as a PRF in the commit log for r344913.

As documented in that commit, administrators can retain the prior (AES-ICM)
mode of operation by setting the 'kern.random.use_chacha20_cipher' tunable
to 0 in loader.conf(5).

Approved by: csprng(delphij, markm)
Differential Revision: https://reviews.freebsd.org/D22878

Details

Provenance
cemAuthored on Dec 20 2019, 9:11 PM
Parents
rG7c237b7c3a55: Correct a mistakenly inverted condition in r355833.
Branches
Unknown
Tags
Unknown