Hi Jason,
On Mon, Sep 26, 2022 at 12:06 PM Jason A. Donenfeld <Jason@xxxxxxxxx> wrote:
On 9/26/22, Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> wrote:
On Fri, Sep 23, 2022 at 7:03 PM Jason A. Donenfeld <Jason@xxxxxxxxx> wrote:
The RNG seed boot record is memzeroed after processing, in order to
preserve forward secrecy. By saving the bootinfo for procfs prior to
that, forward secrecy is violated, since it becomes possible to recover
past states. So, save the bootinfo block only after first processing
them.
Fixes: a1ee38ab1a75 ("m68k: virt: Use RNG seed from bootinfo block")
Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx>
Reviewed-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
Thanks for the review.
Did you intend to take these 3 patches through your m68k tree, or did
you want me to take them for some reason instead?
This is all TBD, see the comments I'm writing on the other patches ;-)
Gr{oetje,eeting}s,
Geert
--
Geert Uytterhoeven -- There's lots of Linux beyond ia32 -- geert@xxxxxxxxxxxxxx
In personal conversations with technical people, I call myself a hacker. But
when I'm talking to journalists I just say "programmer" or something like that.
-- Linus Torvalds
