summaryrefslogtreecommitdiff
path: root/lib/libpthread/pthread_spin.3
diff options
context:
space:
mode:
Diffstat (limited to 'lib/libpthread/pthread_spin.3')
0 files changed, 0 insertions, 0 deletions
the high water mark -- while users of /dev/random get their generators rekeyed every time key-length bits are output. The underlying cprng_strong API can use AES-256 or AES-128, but we use AES-128 because of concerns about related-key attacks on AES-256. This improves performance (and reduces entropy pool depletion) significantly for users of /dev/urandom but does cause users of /dev/random to rekey twice as often. Also fixes various bugs (including some missing locking and a reseed-counter overflow in the CTR_DRBG code) found while testing this. For long reads, this generator is approximately 20 times as fast as the old generator (dd with bs=64K yields 53MB/sec on 2Ghz Core2 instead of 2.5MB/sec) and also uses a separate mutex per instance so concurrency is greatly improved. For reads of typical key sizes for modern cryptosystems (16-32 bytes) performance is about the same as the old code: a little better for 32 bytes, a little worse for 16 bytes. 2011-11-29Remove rnd_extract_data from the public kernel API (it is for use by thetls stream generators only). Clean up some related minor issues. 2008-04-28Remove clause 3 and 4 from TNF licensesmartin