Subject: CVS commit: pkgsrc/security/mbedtls
From: Nia Alarie
Date: 2020-06-29 14:39:36
Message id: 20200629123936.6676EFB28@cvs.NetBSD.org

Log Message:
mbedtls: Add KERN_ARND support.

Motivation: the default behaviour of reopening /dev/urandom repeatedly
for every 128 bytes of entropy required is _exceedingly_ slow on NetBSD.
Not helped is using fread(), which assumes a long-lived file and buffers
excessively. This change makes the standard gen_entropy tool run in
milliseconds instead of seconds when it generates 48K of randomness.

Not only that, but sysctl is a lot more robust in e.g. chroots, resource
limited processes, etc.

Risk: On NetBSD, the security properties of the previous and current
behaviour are identical.

Upstreamed: https://github.com/ARMmbed/mbedtls/pull/3423

Bump PKGREVISION.

Files:
RevisionActionfile
1.16modifypkgsrc/security/mbedtls/Makefile
1.2modifypkgsrc/security/mbedtls/buildlink3.mk
1.12modifypkgsrc/security/mbedtls/distinfo
1.1addpkgsrc/security/mbedtls/patches/patch-library_entropy__poll.c