CONFIG_RANDOM_TRUST_BOOTLOADER: Initialize RNG using bootloader-supplied seed

General informations

The Linux kernel configuration item CONFIG_RANDOM_TRUST_BOOTLOADER has multiple definitions:

Initialize RNG using bootloader-supplied seed found in drivers/char/Kconfig

The configuration item CONFIG_RANDOM_TRUST_BOOTLOADER:

• prompt: Initialize RNG using bootloader-supplied seed
• type: bool
• depends on: (none)
• defined in drivers/char/Kconfig
• found in Linux kernels: 5.19, 6.0–6.1, 6.1+HEAD

Help text

Initialize the RNG using a seed supplied by the bootloader or boot environment (e.g. EFI or a bootloader-generated device tree). This seed is not used directly, but is rather hashed into the main input pool, and this happens regardless of whether or not this option is enabled. Instead, this option controls whether the seed is credited and hence can initialize the RNG. Additionally, other sources of randomness are always used, regardless of this setting. Enabling this implies trusting that the bootloader can supply high quality and non-backdoored seeds.

Say Y here unless you have reason to mistrust your bootloader or believe its RNG facilities may be faulty. This may also be configured at boot time with "random.trust_bootloader=on/off".

Trust the bootloader to initialize Linux's CRNG found in drivers/char/Kconfig

The configuration item CONFIG_RANDOM_TRUST_BOOTLOADER:

• prompt: Trust the bootloader to initialize Linux's CRNG
• type: bool
• depends on: (none)
• defined in drivers/char/Kconfig
• found in Linux kernels: 5.4–5.18, 5.19-rc+HEAD

Help text

Some bootloaders can provide entropy to increase the kernel's initial device randomness. Say Y here to assume the entropy provided by the booloader is trustworthy so it will be added to the kernel's entropy pool. Otherwise, say N here so it will be regarded as device input that only mixes the entropy pool. This can also be configured at boot with "random.trust_bootloader=on/off".

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: