Hi Geert, On 9/26/22, Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> wrote:
On Fri, Sep 23, 2022 at 7:03 PM Jason A. Donenfeld <Jason@xxxxxxxxx> wrote:The RNG seed boot record is memzeroed after processing, in order to preserve forward secrecy. By saving the bootinfo for procfs prior to that, forward secrecy is violated, since it becomes possible to recover past states. So, save the bootinfo block only after first processing them. Fixes: a1ee38ab1a75 ("m68k: virt: Use RNG seed from bootinfo block") Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx>Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
Thanks for the review. Did you intend to take these 3 patches through your m68k tree, or did you want me to take them for some reason instead? Jason
