raspberrypi / pico-sdk

BSD 3-Clause "New" or "Revised" License

3.27k stars 844 forks source link

can give altcp_tls more entropy #1577

Closed peterharperuk closed 1 month ago

peterharperuk commented 7 months ago

The altcp_tls api is the easiest way to use tls in the sdk. It's using out random number generator but we can pass in more entropy with the following macros.

ifndef ALTCP_MBEDTLS_ENTROPY_PTR

define ALTCP_MBEDTLS_ENTROPY_PTR NULL

endif

ifndef ALTCP_MBEDTLS_ENTROPY_LEN

define ALTCP_MBEDTLS_ENTROPY_LEN 0

endif

Suggest we pass in some randomness from cmake so at least it's different per build?

kilograham commented 2 months ago

Not convinced that some build time entropy (possibly per configuration) really adds much?

peterharperuk commented 1 month ago

Let's not bother then.