From eba85be0f25dd1af9cdab3af2a4f98b14fe9c41e Mon Sep 17 00:00:00 2001 From: Oleksij Rempel Date: Wed, 22 Mar 2017 10:14:38 +0100 Subject: common: password: make use of get_crypto_bytes get_random_bytes is providing prng, if we have HWRNG we should be able to use it over get_crypto_bytes Signed-off-by: Oleksij Rempel Signed-off-by: Sascha Hauer --- common/password.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'common/password.c') diff --git a/common/password.c b/common/password.c index d52b746f0f..74d328f4b2 100644 --- a/common/password.c +++ b/common/password.c @@ -365,7 +365,11 @@ int set_env_passwd(unsigned char* passwd, size_t length) char *salt = passwd_sum; int keylen = PBKDF2_LENGTH - PBKDF2_SALT_LEN; - get_random_bytes(passwd_sum, PBKDF2_SALT_LEN); + ret = get_crypto_bytes(passwd_sum, PBKDF2_SALT_LEN); + if (ret) { + pr_err("Can't get random numbers\n"); + return ret; + } ret = pkcs5_pbkdf2_hmac_sha1(passwd, length, salt, PBKDF2_SALT_LEN, PBKDF2_COUNT, keylen, key); -- cgit v1.2.3