summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorWerner Koch <wk@gnupg.org>2017-06-16 10:42:44 +0200
committerWerner Koch <wk@gnupg.org>2017-06-16 10:42:44 +0200
commitb05a4abc358b204dba343d9cfbd59fdc828c1686 (patch)
treecfa7f763b569535f5bf00cdc22292a8694a4fb5e /doc
parentf5e7763ddca59dcd9ac9f2f4d50cb41b14a34a9e (diff)
downloadlibgcrypt-b05a4abc358b204dba343d9cfbd59fdc828c1686.tar.gz
Implement global config file /etc/gcrypt/random.conf
* src/hwfeatures.c (my_isascii): Move macro to ... * src/g10lib.h: here. * tests/random.c (main): Dump random stats. * random/random.c (RANDOM_CONF_FILE): New. (_gcry_random_read_conf): New. (_gcry_random_dump_stats): Call rndjent stats. * random/rndjent.c (jent_rng_totalcalls, jent_rng_totalbytes): New. (_gcry_rndjent_poll): Take care of config option disable-jent. Wipe buffer. Bump counters. (_gcry_rndjent_dump_stats): New. Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'doc')
-rw-r--r--doc/gcrypt.texi15
1 files changed, 15 insertions, 0 deletions
diff --git a/doc/gcrypt.texi b/doc/gcrypt.texi
index ae66dfc2..3567582e 100644
--- a/doc/gcrypt.texi
+++ b/doc/gcrypt.texi
@@ -5455,6 +5455,21 @@ are:
This file can be used to disable the use of hardware based
optimizations, @pxref{hardware features}.
+
+@item /etc/gcrypt/random.conf
+@cindex /etc/gcrypt/random.conf
+This file can be used to globally change parameters of the random
+generator. The file is a simple text file where empty lines and
+lines with the first non white-space character being '#' are
+ignored. Supported options are
+
+@table @file
+@item disable-jent
+@cindex disable-jent
+Disable the use of the jitter based entropy generator.
+
+@end table
+
@item /etc/gcrypt/fips_enabled
@itemx /proc/sys/crypto/fips_enabled
@cindex /etc/gcrypt/fips_enabled