x86/cfi: Add boot time hash randomization

Browse source

In order to avoid known hashes (from knowing the boot image),
randomize the CFI hashes with a per-boot random seed.

Suggested-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20221027092842.765195516@infradead.org

...

This commit is contained in:

Peter Zijlstra 2022-10-27 11:28:16 +02:00

parent 082c4c8152

commit 0c3e806ec0

1 changed files with 108 additions and 12 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

120

arch/x86/kernel/alternative.c

View file