Changes to cryptographic RNG

gsliepen / tinc

a VPN daemon

http://tinc-vpn.org/

Other

1.93k stars 283 forks source link

Changes to cryptographic RNG #368

Closed hg closed 2 years ago

hg commented 2 years ago

extract copypasted code into a separate file
use it for libgcrypt (since we're already using it for OpenSSL, even though it provides its own generator)
add support for getrandom() on Linux

getrandom doesn't add very much, but it's also practically free to support; takes one open file descriptor away, adds the ability to work in badly configured chroots/containers where /dev/(u)random is missing.

gsliepen commented 2 years ago

Great! I don't think there's anything wrong with the expectedfailure test. Cherry-picked as 0fe69908838248c28624beb540257892db6bdcbd.