Re: [PATCH 1/1] tools: use adequate entropy source for initialization vector

2024-04-10 Thread Heinrich Schuchardt
On 4/11/24 01:46, Mark Kettenis wrote: From: Heinrich Schuchardt Date: Thu, 11 Apr 2024 01:31:16 +0200 The random() function is unsafe to initialize cryptographic data. Use getrandom() which reads from /dev/urandom instead. getrandom() is available on Linux sine release 3.17 and on BSD. NACK

Re: [PATCH 1/1] tools: use adequate entropy source for initialization vector

2024-04-10 Thread Mark Kettenis
> From: Heinrich Schuchardt > Date: Thu, 11 Apr 2024 01:31:16 +0200 > > The random() function is unsafe to initialize cryptographic data. > Use getrandom() which reads from /dev/urandom instead. > > getrandom() is available on Linux sine release 3.17 and on BSD. NACK getrandom() isn't evailabl

[PATCH 1/1] tools: use adequate entropy source for initialization vector

2024-04-10 Thread Heinrich Schuchardt
The random() function is unsafe to initialize cryptographic data. Use getrandom() which reads from /dev/urandom instead. getrandom() is available on Linux sine release 3.17 and on BSD. Addresses-Coverity-ID: 312953 Calling risky function Signed-off-by: Heinrich Schuchardt --- tools/image-host.c