[PATCH v2] crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A

Ard Biesheuvel ardb at kernel.org
Tue Apr 28 09:30:05 PDT 2026


On Tue, 28 Apr 2026, at 15:24, Marek Behún wrote:
> Hi Thorsten,
>
> Bill also wrote about ATSHA204A [1]
>
>   My best guess as to what's going on here is that the device has a
>   ring-oscillator based entropy source, but that it generates only a few bits
>   of entropy for each use.  It seems to be called before generating each
>   32-byte "random" value, which is why the second set of 32-bit values have
>   more possible values, and the 3rd has even more.  However, the number of
>   unique values in the final column of 32*N byte values is always equal to
>   the number of unique values of the entire string of bytes.
>
> If this is true that the device generates <256 true random bits and then
> mixes in non-volatile pseudorandom number generator to produce 256 bits,
> then the quality should not be set to full 1024.
>

This post is about the Hashlet, which has a ATSHA204 not ATSHA204A.





More information about the linux-arm-kernel mailing list