)]}'
{
  "commit": "db07cd26ac6a418dc2823187958edcfdb415fa83",
  "tree": "7b9edef481bf6ab03778a904078ac6020bfeb237",
  "parents": [
    "a7cd942bb6e3559d86257fe3b57844e55341a3a0"
  ],
  "author": {
    "name": "Stephan Mueller",
    "email": "smueller@chronox.de",
    "time": "Wed May 08 16:19:24 2019 +0200"
  },
  "committer": {
    "name": "Herbert Xu",
    "email": "herbert@gondor.apana.org.au",
    "time": "Thu May 23 14:01:06 2019 +0800"
  },
  "message": "crypto: drbg - add FIPS 140-2 CTRNG for noise source\n\nFIPS 140-2 section 4.9.2 requires a continuous self test of the noise\nsource. Up to kernel 4.8 drivers/char/random.c provided this continuous\nself test. Afterwards it was moved to a location that is inconsistent\nwith the FIPS 140-2 requirements. The relevant patch was\ne192be9d9a30555aae2ca1dc3aad37cba484cd4a .\n\nThus, the FIPS 140-2 CTRNG is added to the DRBG when it obtains the\nseed. This patch resurrects the function drbg_fips_continous_test that\nexisted some time ago and applies it to the noise sources. The patch\nthat removed the drbg_fips_continous_test was\nb3614763059b82c26bdd02ffcb1c016c1132aad0 .\n\nThe Jitter RNG implements its own FIPS 140-2 self test and thus does not\nneed to be subjected to the test in the DRBG.\n\nThe patch contains a tiny fix to ensure proper zeroization in case of an\nerror during the Jitter RNG data gathering.\n\nSigned-off-by: Stephan Mueller \u003csmueller@chronox.de\u003e\nReviewed-by: Yann Droneaud \u003cydroneaud@opteya.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "2a5b16bb000c384e90c7de620efd71db35995324",
      "old_mode": 33188,
      "old_path": "crypto/drbg.c",
      "new_id": "b6929eb5f565d4b6450f08e3d4d88f1d18cfca77",
      "new_mode": 33188,
      "new_path": "crypto/drbg.c"
    },
    {
      "type": "modify",
      "old_id": "3fb581bf3b875b8ee90874f5caec1d2fb0d2c1d2",
      "old_mode": 33188,
      "old_path": "include/crypto/drbg.h",
      "new_id": "8c9af21efce1d94c39bdd1c4358f861f15a53843",
      "new_mode": 33188,
      "new_path": "include/crypto/drbg.h"
    }
  ]
}
