Invoke the EFI_RNG_PROTOCOL protocol in the context of the x86 EFI stub, same as is done on arm/arm64 since commit 568bc4e87033 ("efi/arm*/libstub: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table"). Within the stub, a Linux-specific RNG seed UEFI config table will be seeded. The EFI routines in the core kernel will pick that up later, yet still early during boot, to seed the kernel entropy pool. If CONFIG_RANDOM_TRUST_BOOTLOADER, entropy is credited for this seed.
Showing the changes to include/linux (1 of 4 files). Show all
Unified · Split
| @@ -1645,6 +1645,8 @@ static inline void · 1644 unmodified lines | |||
| 1645 | efi_enable_reset_attack_mitigation(efi_system_table_t *sys_table_arg) { } | 1645 | efi_enable_reset_attack_mitigation(efi_system_table_t *sys_table_arg) { } |
| 1646 | #endif | 1646 | #endif |
| 1647 | 1647 | ||
| 1648 | efi_status_t efi_random_get_seed(efi_system_table_t *sys_table_arg); | ||
| 1649 | |||
| 1648 | void efi_retrieve_tpm2_eventlog(efi_system_table_t *sys_table); | 1650 | void efi_retrieve_tpm2_eventlog(efi_system_table_t *sys_table); |
| 1649 | 1651 | ||
| 1650 | /* | 1652 | /* |