openbsd/src/lib/libcrypto/arc4random, branch libressl-v2.1.4

Add arc4random/getentropy shims for NetBSD.

2015-01-19T20:21:40+00:00

The latest NetBSD (6.1.5) arc4random does not appear to reseed the CRNG state after a fork, so provide an override until the fork-safe version in CVS appears in a release. These are the same as the FreeBSD shims. ok deraadt@

back in september I did the large abstraction refactoring to allow these

2015-01-15T06:57:18+00:00

other systems to fit into the same mold, so add copyright

mix in more virtual memory and process information

2015-01-07T01:15:57+00:00

add initial HP-UX getentropy/arc4random support.

2015-01-06T21:08:11+00:00

patch from Kinichiro Inoguchi, tested on HP-UX 11.31 ok deraadt@

correct the failure case for getentropy on win32

2014-11-11T13:54:33+00:00

CryptAcquireContext and CryptGenRandom returns zero (FALSE) if fails. From: Dongsheng Song

Add hooks to override native arc4random_buf on FreeBSD.

2014-11-03T06:23:30+00:00

The FreeBSD-native arc4random_buf implementation falls back to weak sources of entropy if the sysctl fails. Remove these dangerous fallbacks by overriding locally. Unfortunately, pthread_atfork() is also broken on FreeBSD (at least 9 and 10) if a program does not link to -lthr. Callbacks registered with pthread_atfork() simply fail silently. So, it is not always possible to detect a PID wraparound. I wish we could do better. This improves arc4random_buf's safety compared to the native FreeBSD implementation. Tested on FreeBSD 9 and 10.

include header needed by older linux kernels

2014-10-11T16:44:05+00:00

not all versions of include by default

preserve errno value on success.

2014-08-28T01:00:57+00:00

If getrandom returns a temporary failure, make sure errno is not polluted when it succeeds. Thanks to deraadt@ for pointing it out.

only build the getrandom path if SYS_getrandom is defined.

2014-08-16T18:42:41+00:00

like the sysctl path

getrandom(2) support for getentropy_linux

2014-08-16T17:21:56+00:00

This enables support for the new getrandom(2) syscall in Linux 3.17. If the call exists and fails, return a failure in getentropy(2) emulation as well. This adds a EINTR check in case the urandom pool is not initialized. Tested on Fedora Rawhide with 3.17rc0 and Ubuntu 14.04 ok deraadt@