Re: [PATCH v4 3/3] x86 mm, x86 architecture (32-bit and 64-bit): arch/x86/mm/kaslr.c: Adds 64bits version of prandom_seed_state

From: H. Peter Anvin
Date: Tue Jan 17 2023 - 19:28:48 EST




On 1/17/23 13:16, David Keisar Schm wrote:

Because (the way we understand this), Kees Cook prefers to keep the original API, so that a fixed seed can be injected at will (for debugging). Seehttps://lkml.org/lkml/2023/1/6/772 <https://lkml.org/lkml/2023/1/6/772>


This bothers me, because with FG-KASLR is *exactly* when a bad PRNG will shine through.

-hpa