Received: by 2002:ad5:4acb:0:0:0:0:0 with SMTP id n11csp2415661imw; Wed, 6 Jul 2022 05:41:15 -0700 (PDT) X-Google-Smtp-Source: AGRyM1urkhx2w0Cy/J67U2xirdv9vBpuejAse29s7VTSmlVioHXAdIrYn1Slu+W+IoWpVZYTTFek X-Received: by 2002:a63:f959:0:b0:412:4bf5:e846 with SMTP id q25-20020a63f959000000b004124bf5e846mr13627408pgk.217.1657111275165; Wed, 06 Jul 2022 05:41:15 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1657111275; cv=none; d=google.com; s=arc-20160816; b=XkZzoRqh2izllCqybExadCREL4smxiPKBQicE2WMjbfYPp+OWLIFyH5IUoPDrryo0n lnAgjSr72KnytnR5f3oo0P3h8GA+aVEAx0QpcC//lPFGepqNg8hF0dBxgC9YJHbZD83P mgnnzhoRmBEAZT4gALe47/G2vSoBPKgOYaLrzNAtj3BPeUKgPUmqWllOIgd8Xzom0qzb DXQhM8jO2Mrp1YKcxQhCWCv2moJJRd8QwvOf9sqWS7DhQXvCforVZoPyWuKJ692Hiw8t pbpk0S8+MGwqxUt3RGmEqugNpreglfVhaPy6oPWXuuIFDqQENFYdmpF8iVyoY6YIFAQw FlCw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=wRdQIXL+RCAyyd72uEUIKY6ww/WujnqY3JOF3eBRCiU=; b=OJWsv75bfwY74uNdZPogE7q6ePaCAsGK2Mss8GunpPm74USfZDMGbaw5mn24gW++QA nf4yW7Xzgn9JBxDnxrhw221TQMnQLteF7A8HcuSnOERS4PNYJ92dRZPm7pQi3lLnomam PHba9J321KUL+Wn0Aq9ycdtkuzVWYBKOAaJAvppUoHbaBc+Y7TtEHQv5rSBe6pvNgGa9 LU4XMwL/7nSBcTSdKYzCtVwSC57wT0icZ+nVzjjyH5AOoVL+MPXk/trENbkhev1wDYCt Av7nhChVDiOODC3FmhdLvg+4p25fTxZZNVc3f9k8giZwuFTzF3Bsh1oQ04sI77k5HRxe CwEA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@alien8.de header.s=dkim header.b=rdh8t6RF; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=alien8.de Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id z16-20020a056a00241000b005285c2a2e46si14960784pfh.338.2022.07.06.05.41.03; Wed, 06 Jul 2022 05:41:15 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@alien8.de header.s=dkim header.b=rdh8t6RF; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=alien8.de Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S233663AbiGFMXk (ORCPT + 99 others); Wed, 6 Jul 2022 08:23:40 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:57932 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S233632AbiGFMXi (ORCPT ); Wed, 6 Jul 2022 08:23:38 -0400 Received: from mail.skyhub.de (mail.skyhub.de [IPv6:2a01:4f8:190:11c2::b:1457]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 067DD19002; Wed, 6 Jul 2022 05:23:36 -0700 (PDT) Received: from zn.tnic (p200300ea970ff625329c23fffea6a903.dip0.t-ipconnect.de [IPv6:2003:ea:970f:f625:329c:23ff:fea6:a903]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.skyhub.de (SuperMail on ZX Spectrum 128k) with ESMTPSA id 6AAC51EC0554; Wed, 6 Jul 2022 14:23:31 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alien8.de; s=dkim; t=1657110211; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:in-reply-to:in-reply-to: references:references; bh=wRdQIXL+RCAyyd72uEUIKY6ww/WujnqY3JOF3eBRCiU=; b=rdh8t6RFc0gGt9G7tiGczrhFL/KSKJRLZe9z6ziieJGHXPuN46/Wx0tgG2eu18eZZHq/6u XqBPTMWfxRifBHoav2tz0EDz93YQXWAy36Yq4MltpFTjWiu4ZebUZOyXzE/oVOAM+QiOBG FkmSrY+t2bnotZdQZMoN34logw4SzC4= Date: Wed, 6 Jul 2022 14:23:31 +0200 From: Borislav Petkov To: "H. Peter Anvin" Cc: "Jason A. Donenfeld" , linux-arm-kernel@lists.infradead.org, linuxppc-dev@lists.ozlabs.org, linux-s390@vger.kernel.org, linux-kernel@vger.kernel.org, x86@kernel.org, Catalin Marinas , Will Deacon , Michael Ellerman , Heiko Carstens , Alexander Gordeev , Thomas Gleixner , Greg Kroah-Hartman , Arnd Bergmann Subject: Re: [PATCH] random: remove CONFIG_ARCH_RANDOM and "nordrand" Message-ID: References: <20220705190121.293703-1-Jason@zx2c4.com> <11C903CC-22A7-48EE-AD63-E71CC8D28B88@zytor.com> <805B66CB-D847-4547-B6EE-C4FB72B75765@zytor.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <805B66CB-D847-4547-B6EE-C4FB72B75765@zytor.com> X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Jul 05, 2022 at 04:11:45PM -0700, H. Peter Anvin wrote: > What I'm wondering is if we shouldn't be simply instrument *every* > invocation, and set the trust to zero if we ever trip it. I guess you can add some logic to rdrand_long() to sanity-check what it returns... But would that be worth the effort? -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette