• D
    Revert the DEVRANDOM_WAIT feature · ad416c80
    Dr. Matthias St. Pierre 提交于
    The DEVRANDOM_WAIT feature added a select() call to wait for the
    `/dev/random` device to become readable before reading from the
    `/dev/urandom` device. It was introduced in commit 38023b87f037
    in order to mitigate the fact that the `/dev/urandom` device
    does not block until the initial seeding of the kernel CSPRNG
    has completed, contrary to the behaviour of the `getrandom()`
    system call.
    
    It turned out that this change had negative side effects on
    performance which were not acceptable. After some discussion it
    was decided to revert this feature and leave it up to the OS
    resp. the platform maintainer to ensure a proper initialization
    during early boot time.
    
    Fixes #9078
    
    This partially reverts commit 38023b87f037.
    Reviewed-by: NTim Hudson <tjh@openssl.org>
    Reviewed-by: NViktor Dukhovni <viktor@openssl.org>
    
    (cherry picked from commit a08714e18131b1998faa0113e5bd4024044654ac)
    
    (Merged from https://github.com/openssl/openssl/pull/9118)
    ad416c80
rand_unix.c 19.8 KB