On Tue, Feb 08, 2022 at 04:53:32PM +0100, Jason A. Donenfeld wrote: > Continuing the reasoning of "random: use RDSEED instead of RDRAND in > entropy extraction" from this series, at init time we also don't want to > be xoring RDSEED directly into the crng. Instead it's safer to put it > into our entropy collector and then re-extract it, so that it goes > through a hash function with preimage resistance. > > Cc: Theodore Ts'o <tytso@xxxxxxx> > Cc: Dominik Brodowski <linux@xxxxxxxxxxxxxxxxxxxx> > Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx> > --- > drivers/char/random.c | 14 ++++---------- > 1 file changed, 4 insertions(+), 10 deletions(-) > Looks good, Reviewed-by: Eric Biggers <ebiggers@xxxxxxxxxx> - Eric