]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
crypto: atmel-sha204a - Set hwrng quality to lowest possible
authorMarek Behún <kabel@kernel.org>
Tue, 22 Apr 2025 09:57:18 +0000 (11:57 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 2 May 2025 05:50:46 +0000 (07:50 +0200)
commit 8006aff15516a170640239c5a8e6696c0ba18d8e upstream.

According to the review by Bill Cox [1], the Atmel SHA204A random number
generator produces random numbers with very low entropy.

Set the lowest possible entropy for this chip just to be safe.

[1] https://www.metzdowd.com/pipermail/cryptography/2014-December/023858.html

Fixes: da001fb651b00e1d ("crypto: atmel-i2c - add support for SHA204A random number generator")
Cc: <stable@vger.kernel.org>
Signed-off-by: Marek Behún <kabel@kernel.org>
Acked-by: Ard Biesheuvel <ardb@kernel.org>
Reviewed-by: Linus Walleij <linus.walleij@linaro.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/crypto/atmel-sha204a.c

index c77f482d2a97e905f453cdd7b5cc77f6cb36122f..5bc809146ffea0a1160dc1db7b91aec9575c2124 100644 (file)
@@ -107,6 +107,12 @@ static int atmel_sha204a_probe(struct i2c_client *client)
        i2c_priv->hwrng.name = dev_name(&client->dev);
        i2c_priv->hwrng.read = atmel_sha204a_rng_read;
 
+       /*
+        * According to review by Bill Cox [1], this HWRNG has very low entropy.
+        * [1] https://www.metzdowd.com/pipermail/cryptography/2014-December/023858.html
+        */
+       i2c_priv->hwrng.quality = 1;
+
        ret = devm_hwrng_register(&client->dev, &i2c_priv->hwrng);
        if (ret)
                dev_warn(&client->dev, "failed to register RNG (%d)\n", ret);