Strong entropy/random sources are a must to get secure crypto algorithms, but sometimes its useful to allow non-CS sources as well for sake of test purposes. MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG_ALLOW_NON_CSPRNG was designed exactly for this scope, but recently also TEST_CSPRNG_GENERATOR was added and it acts similarly: - MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG_ALLOW_NON_CSPRNG operates in "zephyr/modules/mbedtls/zephyr_entropy.c" allowing mbedtls_psa_external_get_random() to try both sys_csrand_get() first and then sys_rand_get() as fallback. - TEST_CSPRNG_GENERATOR instead operates in "zephyr/subsys/random/random_test_csprng.c" and it basically wraps the call to sys_csrand_get() with a call to sys_rand_get(). Albeit they operate at different level, the result is identical, so Mbed TLS should support both of them when MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG is set and there is no CSPRNG_ENABLED. Signed-off-by: Valerio Setti <vsetti@baylibre.com> |
||
|---|---|---|
| .. | ||
| acpica | ||
| canopennode | ||
| cmsis | ||
| cmsis-dsp | ||
| cmsis-nn | ||
| fatfs | ||
| hal_ambiq | ||
| hal_ethos_u | ||
| hal_gigadevice | ||
| hal_infineon | ||
| hal_nordic | ||
| hal_nxp | ||
| hal_rpi_pico | ||
| hal_silabs | ||
| hal_st | ||
| hal_tdk | ||
| hal_wch | ||
| hostap | ||
| liblc3 | ||
| littlefs | ||
| loramac-node | ||
| lvgl | ||
| lz4 | ||
| mbedtls | ||
| nanopb | ||
| nrf_wifi | ||
| openthread | ||
| percepio | ||
| segger | ||
| tflite-micro | ||
| thrift | ||
| trusted-firmware-a | ||
| trusted-firmware-m | ||
| uoscore-uedhoc | ||
| zcbor | ||
| Kconfig | ||
| Kconfig.altera | ||
| Kconfig.atmel | ||
| Kconfig.chre | ||
| Kconfig.cypress | ||
| Kconfig.eos_s3 | ||
| Kconfig.esp32 | ||
| Kconfig.imx | ||
| Kconfig.infineon | ||
| Kconfig.intel | ||
| Kconfig.libmetal | ||
| Kconfig.mcuboot | ||
| Kconfig.mcux | ||
| Kconfig.microchip | ||
| Kconfig.nuvoton | ||
| Kconfig.nxp_s32 | ||
| Kconfig.open-amp | ||
| Kconfig.picolibc | ||
| Kconfig.renesas_fsp | ||
| Kconfig.rust | ||
| Kconfig.simplelink | ||
| Kconfig.sof | ||
| Kconfig.stm32 | ||
| Kconfig.sysbuild | ||
| Kconfig.syst | ||
| Kconfig.telink | ||
| Kconfig.tinycrypt | ||
| Kconfig.vega | ||
| Kconfig.wurthelektronik | ||
| Kconfig.xtensa | ||
| modules.cmake | ||