gcry_create_nonce after a snapshot or checkpoint restore

[NIIBE Yutaka]

Hello,

Thank you for your report.  Firstly, let us confirm the source code we
look.

Yuxiang Ji wrote:
> We measure how userspace random generators behave when a process or a 
> machine is duplicated, and would like to know where libgcrypt places one 
> case before we write it up.

Please clarify the term "duplicated", do you mean a situation where
getpid returns same value?  (If so, I'm afraid it's out of scope.)

> libgcrypt 1.12.2 as shipped by Fedora 44, source read at 1ff517245292;
> Linux 7.2.11, glibc 2.43; the harness and every log are available.

We don't have any git commit of 1ff517245292 in our repo.  So, I think
that it refers one of Fedora versions?  Please tell us the specific
source code.

And IIUC, RedHat has a practice to use/enforce FIPS mode for a system.
If it is the case, in _gcry_create_nonce, it goes through the different
path in the function.

Please try with non-FIPS mode to see how it goes.
--