diff options
| author | Pierre Gondois <pierre.gondois@arm.com> | 2023-08-11 16:33:05 +0200 |
|---|---|---|
| committer | mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> | 2023-09-08 09:48:55 +0000 |
| commit | bd1f0eecc1dfe51ba20161bef8860d12392006bd (patch) | |
| tree | 076b7ade798e88a6205b56fb426341dad2d03e21 /MdePkg/Include/Protocol/Rng.h | |
| parent | 65b5dd828ef2ea5056031b239a4e7a6642f771a3 (diff) | |
| download | edk2-bd1f0eecc1dfe51ba20161bef8860d12392006bd.zip edk2-bd1f0eecc1dfe51ba20161bef8860d12392006bd.tar.gz edk2-bd1f0eecc1dfe51ba20161bef8860d12392006bd.tar.bz2 | |
MdePkg/DxeRngLib: Request raw algorithm instead of default
The DxeRngLib tries to generate a random number using the 3 NIST
SP 800-90 compliant DRBG algorithms, i.e. 256-bits CTR, HASH and HMAC.
If none of the call is successful, the fallback option is the default
RNG algorithm of the EFI_RNG_PROTOCOL. This default algorithm might
be an unsafe implementation.
Try requesting the Raw algorithm before requesting the default one.
Signed-off-by: Pierre Gondois <pierre.gondois@arm.com>
Reviewed-by: Sami Mujawar <sami.mujawar@arm.com>
Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn>
Acked-by: Ard Biesheuvel <ardb@kernel.org>
Tested-by: Kun Qin <kun.qin@microsoft.com>
Diffstat (limited to 'MdePkg/Include/Protocol/Rng.h')
0 files changed, 0 insertions, 0 deletions