[PATCH master 2/2] crypto: imx-scc: blobgen: use HWRNG for random numbers
Ahmad Fatoum
a.fatoum at pengutronix.de
Wed Apr 16 23:21:52 PDT 2025
The kernel's get_random_bytes provides random numbers suitable for crypto
purposes, while in barebox, we need to use get_crypto_bytes for that.
This footgun needs to be fixed, but until we do, let's make sure crypto
code doesn't use a badly seeded PRNG.
Fixes: b62a31a9069b ("crypto: add new imx-scc driver")
Signed-off-by: Ahmad Fatoum <a.fatoum at pengutronix.de>
---
drivers/crypto/imx-scc/scc-blobgen.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/crypto/imx-scc/scc-blobgen.c b/drivers/crypto/imx-scc/scc-blobgen.c
index 530d0840f810..a444386dab5a 100644
--- a/drivers/crypto/imx-scc/scc-blobgen.c
+++ b/drivers/crypto/imx-scc/scc-blobgen.c
@@ -67,7 +67,7 @@ static int imx_scc_blob_encrypt(struct blobgen *bg, const char *modifier,
req.dst = blob;
req.nbytes = bufsiz;
- get_random_bytes(req.info, MAX_IVLEN);
+ get_crypto_bytes(req.info, MAX_IVLEN);
ret = imx_scc_cbc_des_encrypt(&req);
if (ret)
--
2.39.5
More information about the barebox
mailing list