HomeFreeBSD

random(4): Flip default Fortuna generator over to Chacha20

Description

random(4): Flip default Fortuna generator over to Chacha20

The implementation was landed in r344913 and has had some bake time (at
least on my personal systems). There is some discussion of the motivation
for defaulting to this cipher as a PRF in the commit log for r344913.

As documented in that commit, administrators can retain the prior (AES-ICM)
mode of operation by setting the 'kern.random.use_chacha20_cipher' tunable
to 0 in loader.conf(5).

Approved by: csprng(delphij, markm)
Differential Revision: https://reviews.freebsd.org/D22878

Details

Provenance
cemAuthored on
Differential Revision
D22878: random(4): Flip default Fortuna generator over to Chacha20
Parents
rS355948: Bootstrap mergeinfo for contrib/llvm-project
Branches
Unknown
Tags
Unknown