src - OpenBSD base system

Age	Commit message (Collapse)	Author
2017-07-30	clang (and newer gcc at high -O) are unaware that objects placed in strange	Theo de Raadt
	sections, such as __attribute__((section(".openbsd.randomdata"))), may be non-zero. In combination with "const" or "static" the compiler becomes even more sure nothing can influence the object and assumes the value will be 0. A few optimizations later, a security requirement has been removed. Until a better annotation arrives in compilers, be warned: Do not mix const or static with these random objects, you won't get what you want. Spotted in a regression test by bluhm, long discussion with kettenis.
2017-03-15	spelling and whitespace	Theo de Raadt

2016-12-08	fix spelling errors and typos, from Michael W. Bombardieri	Theo de Raadt

2016-10-18	when openbsd.randomdata was made readonly, the proto seed copy got done	Theo de Raadt
	too late, leading to poor rng in the kernel early on. a behavioural artifact in vmm spotted the issue. ok tedu guenther mlarkin
2016-10-07	another unused variable bites the dust. spotted by deraadt	Ted Unangst

2016-10-07	the old time delta code is no longer used. nothing reads these values.	Ted Unangst
	remove it another relic of the superstitious past. ok deraadt millert mikeb
2016-09-23	kern.arandom no longer exists	Theo de Raadt
	from rob pierce
2016-09-22	Stop pushing version & cfdata into as entropy, since the contents are	Theo de Raadt
	known and we rely on the bootpath to prime us anyways. This also solves the issue raised by kettenis, of version potentially being non-word aligned ok kettenis djm
2016-09-04	Rototil the _rs_clearseed() function once more such that we don't map pages	Mark Kettenis
	beyond the end of .text/.rodata. ok deraadt@
2016-09-03	Since the initial entropy pool is 8192 bytes, we need three pages to create	Mark Kettenis
	the alias mapping when clearing it, since there is no guarantee the pool is page aligned. ok deraadt@
2016-09-01	openbsd.randomdata became RO in userland due to the RELRO work. We should	Theo de Raadt
	also do so in the kernel, which gains us RO ssp cookie, which will prevent spraying attacks. The random layer was openbsd.randomdata annotating working entropy/chacha buffers which in turn required them to be RW. To make that work again, so we need to copy RO seeds to RW working buffers, and later clear the RO seed buffers afterwards using a temporary RW mapping. help & ok kettenis, ok guenther
2016-07-15	Remove unused re_nbits from dev/rnd.c	Tom Cosgrove
	"another leftover of the bean counter" od tedu@ deraadt@
2016-05-23	remove the sysctl kern.random counters, since none of the remaining	Theo de Raadt
	ones are capable of giving valuable works vs does-not-work evidence. ok tedu
2016-05-17	Change the random event buffer from a queue to an endless ring. This way	Ted Unangst
	we don't drop any events when the queue is full. They are instead mixed into previous events. The mixing function selected is addition instead of xor to reduce the possibility that new values effectively erase existing ones. Convert some types to u_int to ensure defined overflow. ok deraadt djm
2016-02-19	Right shift by an amount larger than width of type is undefined behavior.	Stefan Kempf
	Pointed out by Martin Natano, slightly tweaked by me. ok deraadt@
2016-01-08	Use uiomove() instead of uiomovei().	Stefan Kempf
	Diff from Martin Natano, thanks! ok kettenis@, deraadt@
2015-12-28	use ulmin when looking at uio_resid to prevent wrapping around.	Ted Unangst
	from Martin Natano (and also reported by Stefan Kempf)
2015-10-27	Sync chacha_ivsetup to the version in ssh so that we could	Mike Belopuhov
	specify custom counter value when setting up Chacha context. ok reyk djm
2015-05-25	missing word in comment; Kyle Milz	Theo de Raadt

2015-05-04	use the size of the buffer not the pointer in resume_randomness()	Jonathan Gray
	ok djm@ miod@ deraadt@
2015-03-14	Remove some includes include-what-you-use claims don't	Jonathan Gray
	have any direct symbols used. Tested for indirect use by compiling amd64/i386/sparc64 kernels. ok tedu@ deraadt@
2015-02-17	the rnd event ringbuf calculations aren't correct, which may result in	Ted Unangst
	failure to fire the collection timeout. discovered by markus. the order of events here doesn't actually matter, so switch to a simple stack, which is easier to understand. ok markus
2015-02-10	First step towards making uiomove() take a size_t size argument:	Miod Vallat
	- rename uiomove() to uiomovei() and update all its users. - introduce uiomove(), which is similar to uiomovei() but with a size_t. - rewrite uiomovei() as an uiomove() wrapper. ok kettenis@
2015-02-07	New framework that allows hibernate to pass in entropy from it's fresh	Theo de Raadt
	boot. ok mlarkin
2015-01-27	remove the second void * argument on tasks.	David Gwynne
	when workqs were introduced, we provided a second argument so you could pass a thing and some context to work on it in. there were very few things that took advantage of the second argument, so when i introduced pools i suggested removing it. since tasks were meant to replace workqs, it was requested that we keep the second argument to make porting from workqs to tasks easier. now that workqs are gone, i had a look at the use of the second argument again and found only one good use of it (vdsp(4) on sparc64 if you're interested) and a tiny handful of questionable uses. the vast majority of tasks only used a single argument. i have since modified all tasks that used two args to only use one, so now we can remove the second argument. so this is a mechanical change. all tasks only passed NULL as their second argument, so we can just remove it. ok krw@
2014-12-23	not necessary to zero hash context; the hash final functions all do that.	Ted Unangst

2014-12-23	tmp is a bad name for a shactx	Ted Unangst

2014-12-19	rename buffer to digest, more clear. ok deraadt	Ted Unangst

2014-12-19	sha512 produces enough output, we can simplify extraction by not looping.	Ted Unangst
	ok deraadt djm
2014-12-18	Create a suspend/resume infrastructure for the RNG. At suspend time,	Theo de Raadt
	process all queued entropy and create a brand new pool to prevent backtracking upon resume. At resume time, process the entropy queue (since other resume code paths which run earlier can enqueue entropy) and force all higher to reseed. ok reyk djm
2014-10-24	obvious sizes for free	Ted Unangst

2014-10-20	typo; deraadt	Ted Unangst

2014-10-20	use SHA512 to hash entropy instead of MD5	Ted Unangst

2014-09-15	update comments to reflect chacha20. from Max Fillinger	Ted Unangst

2014-07-17	zero entropy buf	Ted Unangst

2014-07-12	add a size argument to free. will be used soon, but for now default to 0.	Ted Unangst
	after discussions with beck deraadt kettenis.
2014-06-14	Change return value of getentropy() to int 0 for success. Maximum	Theo de Raadt
	buffersize is enforced strictly, this supplies sufficient entropy payload to act as seed material. Discourage general use of this API, but lock down this function name as the go-to for userland PRNG seeding. Improve documentation. ok miod matthew
2014-06-13	Add new getentropy() system call. Code and pressure from matthew.	Theo de Raadt
	I accepted that he's right (again) to seperate this out from heavy sysctl API and this will simply a variety of things. Functionname is not used by anyone in the ports tree, so we guess we can use it. Shocking that no application has a function called this. ok matthew & others who pushed him to start this early on
2014-02-05	tiny style adjustments	Ted Unangst

2014-01-22	Emit a warning if no entropy was supplied by the boot loader.	Joel Sing
	ok deraadt@
2014-01-19	Refactor rnd startup so arc4random/arc4random_buf can create a chacha state	Theo de Raadt
	on first call, very early on, from boot-supplied entropy, then feed from that. Later when we have more subsystems ready, the main() can properly initialize the entropy-driven model. Lots of discussion with mikeb. ok kettenis markus mikeb
2014-01-19	With the earlier initialization of the random subsystem, random_hostseed()	Theo de Raadt
	is no longer providing significant value. The random subsystem is in pretty good state, and moments later userland will feed the dmesg. ok jsing
2014-01-19	In random_start() we can assume the msg buffer is mapped, all systems do	Theo de Raadt
	it at startup, or in cpu_startup(). Improve comments to explain what is happening here. ok kettenis jsing
2013-12-28	Put the entropy_pool[] into the ELF .openbsd.randomdata segment.	Theo de Raadt
	Also allow random_init() to be called later, by moving a few entropy control initializions into the lower-level _rs_seed() layer. tested by jsing, phessler and a few others
2013-12-22	spacing; Loganaden Velvindron	Theo de Raadt

2013-12-11	Revert change to sha256: ramdisks don't build with this and the obvious	Philip Guenther
	conf/files change isn't enough due to size limits
2013-12-11	update a few RC4 references to ChaCha. thanks sthen	Ted Unangst

2013-12-11	md5 smells bad. switch to sha256. ok deraadt matthew mikeb	Ted Unangst

2013-11-02	replace rc4 with ChaCha20 here, too; ok djm, tedu, deraadt	Markus Friedl

2013-10-30	replace workq_add_task with the task api.	David Gwynne
	this guarantees the reliability of the arc4_reinit task being run by not relying on a pool to give us memory in an interrupt context. ok mpi@