Received: by 2002:a05:6a10:af89:0:0:0:0 with SMTP id iu9csp990508pxb; Fri, 28 Jan 2022 15:07:55 -0800 (PST) X-Google-Smtp-Source: ABdhPJyJr7wLC0XxVjouOozw0TIZKlkjaI78Gxz0Et12g1F1Aaf5Xm5Cq2mpAtSzZ/ZYioYjYCXX X-Received: by 2002:aa7:d0d1:: with SMTP id u17mr10048820edo.179.1643411275376; Fri, 28 Jan 2022 15:07:55 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1643411275; cv=none; d=google.com; s=arc-20160816; b=IK0KS8+6LNrpdlfnRFzhWf9X3xlR9LOaKm2afmSMfW8cOx/RROGRTNiGyMm0kP9n07 0khS1U8XiklwE67YA3A2Gpe10LD4/SxsTkwXESxdZuOERipd5mPpmg5F4mZ+h6Y+zuVq eTogt8pjldpn4HO4VhIGj3Xn43CjrsK7U+tlkIdsV/YmWIt95d3kbSlLEpb4IrKj5MeL Hui1/4rEfi7FMWDvAdcybca9QZ7qPi32ie7dFkeVP67ZXVxW+deJVXb2YyyUrDqzNF2H 2sseLspz3HrEUl9Wj3K+1GSwfqeQoAM2FbkHF2P/ve/XOccO9nmZdbMJ7dft0cuBMGEN UL1A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=cx7Q9eYiTF57W8EvjtytODkNVtL1gqHvnxpZCbsRo/E=; b=0znByLNq0EMXXfqGjMjjvMNijnTDXnYO1RUuw0TB3hcZNJh5pAwZZpzBn4KtO6Z8jZ cBUvSB+5Tkd6USfvVtUwBn/pFT07SmgRYXkgfwZFBFDQJIg9dm861uGL38vtEVPqDvfu cNytNEahedbqTzV3Eg+b3+VbE2kr/BBeVzqQxgzInQT+Xls7plTaUsoJpZMBPDl9+8Lv 4SPyfWZ/JrjZ35NB8qoHxhJ8pORTxtmt6j7nCbLI7Y4vKwWPruVraSuXvA3M7ZOa8r/f dFESVk45VxjX/CVlgwbjEsKI20VA9wk/dSo6sGz4amQ5VhuKtO8WuQueDdcI0ZTmBip1 c3Jg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=a3DP7yQo; spf=pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id hv13si1952673ejc.985.2022.01.28.15.07.13; Fri, 28 Jan 2022 15:07:55 -0800 (PST) Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=a3DP7yQo; spf=pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1344397AbiA1AMg (ORCPT + 99 others); Thu, 27 Jan 2022 19:12:36 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:43992 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S238679AbiA1AMf (ORCPT ); Thu, 27 Jan 2022 19:12:35 -0500 Received: from mail-ej1-x630.google.com (mail-ej1-x630.google.com [IPv6:2a00:1450:4864:20::630]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id CAEBDC061714 for ; Thu, 27 Jan 2022 16:12:34 -0800 (PST) Received: by mail-ej1-x630.google.com with SMTP id h7so10205739ejf.1 for ; Thu, 27 Jan 2022 16:12:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=cx7Q9eYiTF57W8EvjtytODkNVtL1gqHvnxpZCbsRo/E=; b=a3DP7yQoXkUURS6GcKXcBP835/cVQsxN9ExsdjiBw2awOc0P0i/2dbBrpMiKqyLZzd 56MuRaThF/VBxNbcKQhNxm+QPO9jVTG6jUpCuu1G+nDz5plwdtd1+T2FtNzpVfHFgu5j yKzka7bNMU2w6Wzi+Y3C1BRB+w0V7ia5r9QArzY3Ay7WIj3FFdsOSCyjd6oLuNZw+/JM 5+s3LSyWthhvPIGxTfTOr39HI3kkAVi3X8KVXQhxw8qDjaI1Rle50c6kT3h3pKnh+7P9 NITsI5w5ZoXxahUNkvJkDkyuUTth13Z1l17brzUz5z1cguYE4Y6AjfQGkrAKaokGwmdY WyYw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cx7Q9eYiTF57W8EvjtytODkNVtL1gqHvnxpZCbsRo/E=; b=DPpaJ1UYB3Fd6gTxzgSRyPA3Xvv7KyPG9V03LUo8SlXnq22pGJzB39Mbv0BES+WZqh 0ElsbZYwZwJ0BgpYltd/R0OvSPDAwpFhDv32fK7cjyc39bq0Gc/ltlFiDq5FC0hWJuj8 QUzl7/DQ/pFtWG7ElXclLbk9Q5+n9Umn3ZDbXWF92lZzip2/PZD2fPk7XlrYQL2YORe7 lX9FptcN8at3lzATUJG0IQMdWJklqPPHqEkjLnuqByc2IENKBf8j1ilYjWqvEHMVazTN NPTXqAsPu+JIqO1u+qpTU4HFCLOSu5u8tWIY5hIKhmTBH/AF8bfNGnx52knRb9/ON5tN 8qcg== X-Gm-Message-State: AOAM53057t+nv7fRcMk9yF/ucyptcIeIsHsPX9AT7ZcOWjltG9cdeJdn aZkFz7VcNS0imu68e/ijdEUSgo/Uy6wZMmYZByQ= X-Received: by 2002:a17:906:99c6:: with SMTP id s6mr5137993ejn.522.1643328753238; Thu, 27 Jan 2022 16:12:33 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Sandy Harris Date: Fri, 28 Jan 2022 08:12:20 +0800 Message-ID: Subject: Re: RFC random(4) We don't need no steenking ... To: Eric Biggers Cc: Linux Crypto Mailing List , "Ted Ts'o" , "Jason A. Donenfeld" , Herbert Xu , John Denker Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-crypto@vger.kernel.org Eric Biggers wrote: > On Thu, Jan 27, 2022 at 05:04:07PM +0800, Sandy Harris wrote: > > Current code in extract_buf() declares a local struct blake2s_state, > > calls blake2s_init() which uses initialisation constants > > Which is good, because BLAKE2s is defined to use certain constants. If > different constants were used, then it wouldn't be BLAKE2s anymore, but rather > some homebrew crypto with unknown security properties (like the old "SHA-1" that > wasn't really SHA-1). That's a reasonable argument & something very similar applies to chacha usage. I do not think it holds water, though, since we would still use the blake & chacha transforms. Even in blake, every iteration except the first applies the transform to arbitrary somewhat random data. > > and moves data into the chacha state with memcpy(). > > It's actually XOR'd in. Please take a closer look at crng_reseed(). You are correct.