Extend the user-space RNG interface: 1. Add entropy input via ALG_SET_DRBG_ENTROPY setsockopt option; 2. Add additional data input via sendmsg syscall. This allows DRBG to be tested with test vectors, for example for the purpose of CAVP testing, which otherwise isn't possible. To prevent erroneous use of entropy input, it is hidden under CRYPTO_USER_API_RNG_CAVP config option and requires CAP_SYS_ADMIN to succeed.
Showing the changes to include/uapi (1 of 6 files). Show all
Unified · Split
| @@ -35,6 +35,7 @@ struct af_alg_iv { · 34 unmodified lines | |||
| 35 | #define ALG_SET_OP 3 | 35 | #define ALG_SET_OP 3 |
| 36 | #define ALG_SET_AEAD_ASSOCLEN 4 | 36 | #define ALG_SET_AEAD_ASSOCLEN 4 |
| 37 | #define ALG_SET_AEAD_AUTHSIZE 5 | 37 | #define ALG_SET_AEAD_AUTHSIZE 5 |
| 38 | #define ALG_SET_DRBG_ENTROPY 6 | ||
| 38 | 39 | ||
| 39 | /* Operations */ | 40 | /* Operations */ |
| 40 | #define ALG_OP_DECRYPT 0 | 41 | #define ALG_OP_DECRYPT 0 |