Received: by 2002:a6b:500f:0:0:0:0:0 with SMTP id e15csp1053117iob; Fri, 13 May 2022 21:14:41 -0700 (PDT) X-Google-Smtp-Source: ABdhPJw/faXwukFnyDwKmPQXaQ6XS6tsK27MiIyXcGCZNt5rMl3KNoRqZc37ywTdckgeU6Loi5kT X-Received: by 2002:a05:6000:1787:b0:20c:64d4:d564 with SMTP id e7-20020a056000178700b0020c64d4d564mr6367923wrg.569.1652501681260; Fri, 13 May 2022 21:14:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1652501681; cv=none; d=google.com; s=arc-20160816; b=B9J+JGGvDO2Lp4mHYRtcWqzMfkY/1ElCv14ZXVCjwwfl9lm52xj1F1SX6vaAfFAoen baGbq9dzO5RiFTFnNJoTfZC+zk2f+eoI8yoxcrbiqyhVnzLJtM7bOMHlFXk2IiXPWfPv kP3ZUsIdCUdccorWVcn3H+SMnMKIzeJg5YwLNxmKKWTGFfCUYCwU8UiNZvncCkgk+MWg Dtj1nkVoR7LaKavtPh2Cxy7nPm7up3g25vkLvGGOz6yQjQlXWTuWdRSKSWlO3qtol6Js FTU8pkMF6wQLYddWSs7daB96ztiFYMI64ImrvBdy89VDnxh1eqJtNEDBsA39XUZH1Afr FcEA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=a4sD11ZKK6sqMEDpGj+axkoyGANeBn5FLuCNj9ojO1o=; b=L5CcTurgI7EDGywNS18FYRkreAha5oxmu3jEKP3PsGy86BjyWKHyLOF+uCHpsvmuVm mYWdn0XmfZ3RVYDCQrwwQ6qBQJyItyjL8yJKXp+gTtVRWOdRspaJcA0IVJdrwITcfyng DPhs5xTOt0+eX6h2DC4WFRQbX3foYbdUOyeJnjmA5bBc5hjP3/4zFcjGk3JNWiE5Njn7 eKx6bmU+UC/ItvzqOU4+8zjHf69SZmE+HJnnLLf7SZiwkWrpPafFHXSaZ6s1SkhyDQxZ F8P2GBrikewWl+GrlSpdjpwPom2x1VZ29617CqBPCqYqehLCFK3nWVeo/OAG6l7gvoTq /blg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@zx2c4.com header.s=20210105 header.b="NyG/y0OX"; spf=softfail (google.com: domain of transitioning linux-kernel-owner@vger.kernel.org does not designate 23.128.96.19 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=zx2c4.com Return-Path: Received: from lindbergh.monkeyblade.net (lindbergh.monkeyblade.net. [23.128.96.19]) by mx.google.com with ESMTPS id e9-20020a056000120900b0020ce030b054si3480426wrx.376.2022.05.13.21.14.40 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 May 2022 21:14:41 -0700 (PDT) Received-SPF: softfail (google.com: domain of transitioning linux-kernel-owner@vger.kernel.org does not designate 23.128.96.19 as permitted sender) client-ip=23.128.96.19; Authentication-Results: mx.google.com; dkim=pass header.i=@zx2c4.com header.s=20210105 header.b="NyG/y0OX"; spf=softfail (google.com: domain of transitioning linux-kernel-owner@vger.kernel.org does not designate 23.128.96.19 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=zx2c4.com Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by lindbergh.monkeyblade.net (Postfix) with ESMTP id 918574E44E8; Fri, 13 May 2022 17:45:41 -0700 (PDT) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1380144AbiEMMGF (ORCPT + 99 others); Fri, 13 May 2022 08:06:05 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:33658 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1380131AbiEMMFx (ORCPT ); Fri, 13 May 2022 08:05:53 -0400 Received: from ams.source.kernel.org (ams.source.kernel.org [IPv6:2604:1380:4601:e00::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id A818F1EC5F for ; Fri, 13 May 2022 05:05:51 -0700 (PDT) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ams.source.kernel.org (Postfix) with ESMTPS id 62930B82AF1 for ; Fri, 13 May 2022 12:05:50 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id C153AC34100; Fri, 13 May 2022 12:05:48 +0000 (UTC) Authentication-Results: smtp.kernel.org; dkim=pass (1024-bit key) header.d=zx2c4.com header.i=@zx2c4.com header.b="NyG/y0OX" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zx2c4.com; s=20210105; t=1652443546; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=a4sD11ZKK6sqMEDpGj+axkoyGANeBn5FLuCNj9ojO1o=; b=NyG/y0OX5bQjQMUjE5kScYkp5SHw+t0sFtZBxhuzHE4G66cHL65xEjc7wM0DTyxjL13FNI cfxBRErq+FW9gZqQAK68tYR9GO/NquF9I4ZTv90atjtRXysN9+zO9tVAfv5mYC70SvVFab wVO7EFkoA1jCfM3+6heRnjGNp8xe7ko= Received: by mail.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id 45c5de57 (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Fri, 13 May 2022 12:05:46 +0000 (UTC) From: "Jason A. Donenfeld" To: linux-kernel@vger.kernel.org Cc: "Jason A. Donenfeld" , Dominik Brodowski Subject: [PATCH v2] random: move initialization out of reseeding hot path Date: Fri, 13 May 2022 14:05:43 +0200 Message-Id: <20220513120543.314127-1-Jason@zx2c4.com> In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RDNS_NONE,SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Initialization happens once -- by way of credit_init_bits() -- and then it never happens again. Therefore, it doesn't need to be in crng_reseed(), which is a hot path that is called multiple times. It also doesn't make sense to have there, as initialization activity is better associated with initialization routines. After the prior commit, crng_reseed() now won't be called by multiple concurrent callers, which means that we can safely move the "finialize_init" logic into crng_init_bits() unconditionally. Reviewed-by: Dominik Brodowski Signed-off-by: Jason A. Donenfeld --- Changes v1->v2: - Keep crng_init = CRNG_READY conditional to avoid dirtying cache line. drivers/char/random.c | 42 +++++++++++++++++++----------------------- 1 file changed, 19 insertions(+), 23 deletions(-) diff --git a/drivers/char/random.c b/drivers/char/random.c index 3646eac353b7..8cea19024936 100644 --- a/drivers/char/random.c +++ b/drivers/char/random.c @@ -265,7 +265,6 @@ static void crng_reseed(void) unsigned long flags; unsigned long next_gen; u8 key[CHACHA_KEY_SIZE]; - bool finalize_init = false; extract_entropy(key, sizeof(key)); @@ -282,28 +281,10 @@ static void crng_reseed(void) ++next_gen; WRITE_ONCE(base_crng.generation, next_gen); WRITE_ONCE(base_crng.birth, jiffies); - if (!crng_ready()) { + if (!crng_ready()) crng_init = CRNG_READY; - finalize_init = true; - } spin_unlock_irqrestore(&base_crng.lock, flags); memzero_explicit(key, sizeof(key)); - if (finalize_init) { - process_random_ready_list(); - wake_up_interruptible(&crng_init_wait); - kill_fasync(&fasync, SIGIO, POLL_IN); - pr_notice("crng init done\n"); - if (unseeded_warning.missed) { - pr_notice("%d get_random_xx warning(s) missed due to ratelimiting\n", - unseeded_warning.missed); - unseeded_warning.missed = 0; - } - if (urandom_warning.missed) { - pr_notice("%d urandom warning(s) missed due to ratelimiting\n", - urandom_warning.missed); - urandom_warning.missed = 0; - } - } } /* @@ -835,10 +816,25 @@ static void credit_init_bits(size_t nbits) new = min_t(unsigned int, POOL_BITS, orig + add); } while (cmpxchg(&input_pool.init_bits, orig, new) != orig); - if (orig < POOL_READY_BITS && new >= POOL_READY_BITS) - crng_reseed(); - else if (orig < POOL_EARLY_BITS && new >= POOL_EARLY_BITS) { + if (orig < POOL_READY_BITS && new >= POOL_READY_BITS) { + crng_reseed(); /* Sets crng_init to CRNG_READY under base_crng.lock. */ + process_random_ready_list(); + wake_up_interruptible(&crng_init_wait); + kill_fasync(&fasync, SIGIO, POLL_IN); + pr_notice("crng init done\n"); + if (unseeded_warning.missed) { + pr_notice("%d get_random_xx warning(s) missed due to ratelimiting\n", + unseeded_warning.missed); + unseeded_warning.missed = 0; + } + if (urandom_warning.missed) { + pr_notice("%d urandom warning(s) missed due to ratelimiting\n", + urandom_warning.missed); + urandom_warning.missed = 0; + } + } else if (orig < POOL_EARLY_BITS && new >= POOL_EARLY_BITS) { spin_lock_irqsave(&base_crng.lock, flags); + /* Check if crng_init is CRNG_EMPTY, to avoid race with crng_reseed(). */ if (crng_init == CRNG_EMPTY) { extract_entropy(base_crng.key, sizeof(base_crng.key)); crng_init = CRNG_EARLY; -- 2.35.1