Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable random implementation with strong libcrypto versions #4348

Open
camshaft opened this issue Jan 9, 2024 · 0 comments
Open

Disable random implementation with strong libcrypto versions #4348

camshaft opened this issue Jan 9, 2024 · 0 comments

Comments

@camshaft
Copy link
Contributor

camshaft commented Jan 9, 2024

Problem:

The random module is one of the more complicated components and causes most of the issues in portability.

(This was just an initial search; there's probably more)

We also support linking to, for example, AWS-LC, which has a very good random implementation.

Solution:

When linking to a libcrypto backend with a strong entropy implementation, we should just use that instead of override it with our implementation. We should also avoid compiling our random implementation in this situation to remove the thread locals and global file descriptors.

We'll need to decide which libcrypto implementation is acceptable to use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants