]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
efi: random: reduce seed size to 32 bytes
authorArd Biesheuvel <ardb@kernel.org>
Thu, 20 Oct 2022 08:39:08 +0000 (10:39 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 10 Nov 2022 17:14:27 +0000 (18:14 +0100)
commit83294f7c7759e1e4c3909edc2e2c1dfbb159e153
tree327f1fb60751f8d7714f2a4967b6ef5d12909f12
parentf8e8cda869fd0a023e22c1fa98906d1a61bd152a
efi: random: reduce seed size to 32 bytes

commit 161a438d730dade2ba2b1bf8785f0759aba4ca5f upstream.

We no longer need at least 64 bytes of random seed to permit the early
crng init to complete. The RNG is now based on Blake2s, so reduce the
EFI seed size to the Blake2s hash size, which is sufficient for our
purposes.

While at it, drop the READ_ONCE(), which was supposed to prevent size
from being evaluated after seed was unmapped. However, this cannot
actually happen, so READ_ONCE() is unnecessary here.

Cc: <stable@vger.kernel.org> # v4.14+
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Reviewed-by: Jason A. Donenfeld <Jason@zx2c4.com>
Acked-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/firmware/efi/efi.c
include/linux/efi.h