Path to this page:
Subject: CVS commit: pkgsrc/security/mbedtls
From: Nia Alarie
Date: 2020-06-29 14:39:36
Message id: 20200629123936.6676EFB28@cvs.NetBSD.org
Log Message:
mbedtls: Add KERN_ARND support.
Motivation: the default behaviour of reopening /dev/urandom repeatedly
for every 128 bytes of entropy required is _exceedingly_ slow on NetBSD.
Not helped is using fread(), which assumes a long-lived file and buffers
excessively. This change makes the standard gen_entropy tool run in
milliseconds instead of seconds when it generates 48K of randomness.
Not only that, but sysctl is a lot more robust in e.g. chroots, resource
limited processes, etc.
Risk: On NetBSD, the security properties of the previous and current
behaviour are identical.
Upstreamed: https://github.com/ARMmbed/mbedtls/pull/3423
Bump PKGREVISION.
Files: