libgcrypt: random source via library on Linux?

Werner Koch wk at gnupg.org
Tue Jun 2 11:49:30 CEST 2020


On Fri, 29 May 2020 17:54, Steffen Nurpmeso said:

> Looking at the source it seems libgcrypt knows about the Linux
> getrandom systemcall.  Yet it does not seem to know about glibc's
> getrandom library function.

Which was not available back then when I implemented support for
getrandom.  Further; there is no guarantee that getrandom(2) is
supported on all machines.  We care a lot about backward compatibility
and can't simply demand a certain Linux kernel or glibc version.


> i would change, maybe with a new call-in to rndlinux.c which
> should be made responsible for Linux-only environmental detections

You don't change audited RNG code if there is not a very good reason for
that.


Salam-Shalom,

   Werner


-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20200602/70a9dce5/attachment.sig>


More information about the Gnupg-users mailing list