michaelh/zephyr
1
0
Fork 0
Code Releases Activity
zephyr/subsys/random/CMakeLists.txt

32 lines
1.3 KiB
Text
Raw Normal View History

license: cleanup: add SPDX Apache-2.0 license identifier Update the files which contain no license information with the 'Apache-2.0' SPDX license identifier. Many source files in the tree are missing licensing information, which makes it harder for compliance tools to determine the correct license. By default all files without license information are under the default license of Zephyr, which is Apache version 2. Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2019-04-06 09:08:09 -04:00
# SPDX-License-Identifier: Apache-2.0
subsys/random: Add cryptographically secure and bulk fill functions 1) Add cryptographically secure random functions to provide FIPS 140-2 compliant random functions. 2) Add name to random function choice selectors to ease selection in SOC .defconfig files 3) Add bulk fill random functions. Signed-off-by: David Leach <david.leach@nxp.com>
2019-07-23 14:16:24 -05:00
if (CONFIG_ENTROPY_DEVICE_RANDOM_GENERATOR OR
random: Change testing random generator The old random timer test was not random-looking enough on some platforms. Replace with new test which is psuedo-xoshiro. The generator is still deterministic and does not depend on entropy at all, but should look more random for testing. Change name of generator tree-wide also. Signed-off-by: Declan Snyder <declan.snyder@nxp.com>
2022-12-02 11:41:10 -06:00
CONFIG_RANDOM_TEST_GENERATOR OR
random: add xoshiro128++ PRNG source Adds an implementation of xoshiro128++ as a pseudo random number generator from https://prng.di.unimi.it/ that operates on 32bit words. The algorithm postfix signifies the main operation in the generation function. Therefore xoshiro++ is chosen over xoshiro** as we would prefer to do 2 additions isntead of 2 multiplications on embedded hardware. The quality of the generators appears to be the same in all other respects. xoshiro+ is not chosen despite being faster as it generates random floating-point values, not general purpose random values (The lower 4 bits are linear). Signed-off-by: Jordan Yates <jordan.yates@data61.csiro.au>
2021-07-25 17:45:10 +10:00
CONFIG_XOSHIRO_RANDOM_GENERATOR)
subsys/random: Add cryptographically secure and bulk fill functions 1) Add cryptographically secure random functions to provide FIPS 140-2 compliant random functions. 2) Add name to random function choice selectors to ease selection in SOC .defconfig files 3) Add bulk fill random functions. Signed-off-by: David Leach <david.leach@nxp.com>
2019-07-23 14:16:24 -05:00
zephyr_library()
random: Add syscalls for random subsystem Create syscalls to make possible using random APIs from user mode threads. These APIs can have different implementations, like using entropy driver or Xoroshiro128. Some of these implementations also have some globals to preserve state between calls. Make it run entire in user space would require user adding these globals to their memeory domains and/or grant access to entropy device. Syscalls simplify its usage. Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2020-06-04 11:00:45 -07:00
zephyr_library_sources_ifdef(CONFIG_USERSPACE rand32_handlers.c)
subsys/random: Add cryptographically secure and bulk fill functions 1) Add cryptographically secure random functions to provide FIPS 140-2 compliant random functions. 2) Add name to random function choice selectors to ease selection in SOC .defconfig files 3) Add bulk fill random functions. Signed-off-by: David Leach <david.leach@nxp.com>
2019-07-23 14:16:24 -05:00
endif()
random: Fix non-random number generator warning condition The `TEST_RANDOM_GENERATOR` symbol in itself does not imply that a non-random number generator is selected -- that is indicated by the `RNG_GENERATOR_CHOICE` choices, of which only `TIMER_RANDOM_GENERATOR` is a non-random generator. This commit updates the Random subsystem to print the "non-random number generator usage warning" when `TIMER_RANDOM_GENERATOR` is selected, as opposed to when `TEST_RANDOM_GENERATOR` is selected. Signed-off-by: Stephanos Ioannidis <stephanos.ioannidis@nordicsemi.no>
2022-12-14 05:30:26 +09:00
if (CONFIG_TIMER_RANDOM_GENERATOR)
random: Warning when using test config Generates a warning message when building with CONFIG_TEST_RANDOM_GENERATOR. The purpose is inform that this is not secure and should not used in production. Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2020-09-18 22:34:06 -07:00
message(WARNING "
random: Fix non-random number generator warning condition The `TEST_RANDOM_GENERATOR` symbol in itself does not imply that a non-random number generator is selected -- that is indicated by the `RNG_GENERATOR_CHOICE` choices, of which only `TIMER_RANDOM_GENERATOR` is a non-random generator. This commit updates the Random subsystem to print the "non-random number generator usage warning" when `TIMER_RANDOM_GENERATOR` is selected, as opposed to when `TEST_RANDOM_GENERATOR` is selected. Signed-off-by: Stephanos Ioannidis <stephanos.ioannidis@nordicsemi.no>
2022-12-14 05:30:26 +09:00
Warning: CONFIG_TIMER_RANDOM_GENERATOR is not a truly random generator.
random: Warning when using test config Generates a warning message when building with CONFIG_TEST_RANDOM_GENERATOR. The purpose is inform that this is not secure and should not used in production. Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2020-09-18 22:34:06 -07:00
This capability is not secure and it is provided for testing purposes only.
Use it carefully.")
endif()
random: deprecate `XOROSHIRO_RANDOM_GENERATOR` Deprecate the xoroshiro128+ PRNG algorithm in favour of xoshiro128++. xoshiro128++ is a drop-in replacement which is invisible from the user perspective. xoroshiro128+ is unsuitable because it is explicitly a floating-point PRNG, not a general-purpose PRNG. This means that the lower 4 bits of the output are actually linear, not random (from the designers, https://prng.di.unimi.it/). This means 1/8th of the generated data is not random. Additionally, xoroshiro128+ is not a 32bit algorithm, it operates on 64bit numbers. For the vast majority of Zephyr devices, this makes the PRNG slower than it needs to be. The replacement (xoshiro128++) is 32bit, with no loss in state space (still 128 bit). Signed-off-by: Jordan Yates <jordan.yates@data61.csiro.au>
2021-07-25 19:00:50 +10:00
# XOROSHIRO builds the XOSHIRO implementation because a Kconfig choice cannot
# select another choice as a means of deprecating the symbol. Swapping out the
# implementation lets out-of-tree users still build until the symbol is removed.
zephyr_library_sources_ifdef(CONFIG_XOROSHIRO_RANDOM_GENERATOR rand32_xoshiro128.c)
random: add xoshiro128++ PRNG source Adds an implementation of xoshiro128++ as a pseudo random number generator from https://prng.di.unimi.it/ that operates on 32bit words. The algorithm postfix signifies the main operation in the generation function. Therefore xoshiro++ is chosen over xoshiro** as we would prefer to do 2 additions isntead of 2 multiplications on embedded hardware. The quality of the generators appears to be the same in all other respects. xoshiro+ is not chosen despite being faster as it generates random floating-point values, not general purpose random values (The lower 4 bits are linear). Signed-off-by: Jordan Yates <jordan.yates@data61.csiro.au>
2021-07-25 17:45:10 +10:00
zephyr_library_sources_ifdef(CONFIG_XOSHIRO_RANDOM_GENERATOR rand32_xoshiro128.c)
zephyr_library_sources_ifdef(CONFIG_CTR_DRBG_CSPRNG_GENERATOR rand32_ctr_drbg.c)
random: Change testing random generator The old random timer test was not random-looking enough on some platforms. Replace with new test which is psuedo-xoshiro. The generator is still deterministic and does not depend on entropy at all, but should look more random for testing. Change name of generator tree-wide also. Signed-off-by: Declan Snyder <declan.snyder@nxp.com>
2022-12-02 11:41:10 -06:00
zephyr_library_sources_ifdef(CONFIG_RANDOM_TEST_GENERATOR rand32_test.c)
subsys/random: Add cryptographically secure and bulk fill functions 1) Add cryptographically secure random functions to provide FIPS 140-2 compliant random functions. 2) Add name to random function choice selectors to ease selection in SOC .defconfig files 3) Add bulk fill random functions. Signed-off-by: David Leach <david.leach@nxp.com>
2019-07-23 14:16:24 -05:00
if (CONFIG_ENTROPY_DEVICE_RANDOM_GENERATOR OR CONFIG_HARDWARE_DEVICE_CS_GENERATOR)
zephyr_library_sources(rand32_entropy_device.c)
endif()
if (CONFIG_CTR_DRBG_CSPRNG_GENERATOR)
zephyr_library_link_libraries_ifdef(CONFIG_MBEDTLS mbedTLS)
endif()
Copy permalink