EliasFleckenstein03
/
plan9front
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

kernel: rekey chacha state on each randomread() invocation 

we can encrypt the 256 bit chacha key on each invocation
making it hard to reconstruct previous outputs of the
generator given the current state (backtracking resiatance).
front
cinap_lenrek 2016-09-11 19:07:17 +02:00
parent 36c9a2489d
commit c0a9c3b551
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sys/src/9/port/random.c
View File

@ -96,9 +96,10 @@ randomread(void *p, ulong n)
if(hwrandbuf != nil)
(*hwrandbuf)(p, n);
/* copy chacha state and increment iv */
/* copy chacha state, rekey and increment iv */
qlock(rs);
c = *rs;
chacha_encrypt((uchar*)&rs->input[4], 32, &c);
if(++rs->input[13] == 0)
if(++rs->input[14] == 0)
++rs->input[15];