[PATCH 0/2] Use RNG to get random behaviour

matthias.bgg at kernel.org matthias.bgg at kernel.org
Wed Dec 16 11:41:15 CET 2020


From: Matthias Brugger <mbrugger at suse.com>


For now bootp and uuid code use a weak seed for generating random data.
U-Boot as support for RNG devices now, so we should change to code to
use them if they are present. This will help mitigate issues like seen
in CVE-2019-11690.


Matthias Brugger (2):
  lib: uuid: use RNG device if present
  net: Use NDRNG device in srand_mac()

 lib/uuid.c     | 20 +++++++++++++++++---
 net/net_rand.h | 18 +++++++++++++++++-
 2 files changed, 34 insertions(+), 4 deletions(-)

-- 
2.29.2



More information about the U-Boot mailing list