diff options
| author | David E. O'Brien <obrien@FreeBSD.org> | 2025-10-18 03:15:50 +0000 |
|---|---|---|
| committer | David E. O'Brien <obrien@FreeBSD.org> | 2025-10-28 23:46:15 +0000 |
| commit | 685a78570b359eb2bd4d8c28dde22de54d55b8ec (patch) | |
| tree | 9ae8a1fe1a26b28483ca0b0b020074b5c3da8597 /sys/dev/random/random_harvestq.c | |
| parent | 86b259a28a1a47b0506c519b17d8adb67d4a0b0d (diff) | |
random: remove hifn(4)
The Hifn 7955 & 7956 only supports deprecated & NIST disallowed
algorithms (NIST SP800-224idp): SHA1 and SHA1-HMAC.
Furthermore the entropy RNG of the Hifn 7751, 7951, 7811, 7955,
and 7956 has no NIST Entropy Source Validation (ESV) certificate
and cannot be used in a FIPS-140-3 nor Common Criteara environment.
Furthermore the most prolific instance for FreeBSD was the
Soekris Engineering vpn1201, vpn1211, vpn1401, and vpn1411
offerings. These are all 32-bit only processors. The i386
kernel was de-supported in 15.0.
Reviewed by: jhb
Differential Revision: https://reviews.freebsd.org/D53182
Diffstat (limited to 'sys/dev/random/random_harvestq.c')
| -rw-r--r-- | sys/dev/random/random_harvestq.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/sys/dev/random/random_harvestq.c b/sys/dev/random/random_harvestq.c index e38fd38c310b..643dbac1fc8b 100644 --- a/sys/dev/random/random_harvestq.c +++ b/sys/dev/random/random_harvestq.c @@ -663,7 +663,6 @@ static const char *random_source_descr[ENTROPYSOURCE] = { [RANDOM_RANDOMDEV] = "RANDOMDEV", /* ENVIRONMENTAL_END */ [RANDOM_PURE_SAFE] = "PURE_SAFE", /* PURE_START */ [RANDOM_PURE_GLXSB] = "PURE_GLXSB", - [RANDOM_PURE_HIFN] = "PURE_HIFN", [RANDOM_PURE_RDRAND] = "PURE_RDRAND", [RANDOM_PURE_RDSEED] = "PURE_RDSEED", [RANDOM_PURE_NEHEMIAH] = "PURE_NEHEMIAH", |