CONFIG_RANDOM_TRUST_CPU: Trust the CPU manufacturer to initialize Linux's CRNG

General informations

The Linux kernel configuration item CONFIG_RANDOM_TRUST_CPU:

• prompt: Trust the CPU manufacturer to initialize Linux's CRNG
• type: bool
• depends on: CONFIG_ARCH_RANDOM
• defined in drivers/char/Kconfig
• found in Linux kernels: 4.19–4.20, 5.0–5.13, 5.13+HEAD

Help text

Assume that CPU manufacturer (e.g., Intel or AMD for RDSEED or RDRAND, IBM for the S390 and Power PC architectures) is trustworthy for the purposes of initializing Linux's CRNG. Since this is not something that can be independently audited, this amounts to trusting that CPU manufacturer (perhaps with the insistence or mandate of a Nation State's intelligence or law enforcement agencies) has not installed a hidden back door to compromise the CPU's random number generation facilities. This can also be configured at boot with "random.trust_cpu=on/off".

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: