Sync from SUSE:ALP:Source:Standard:1.0 jitterentropy revision 05bab2a23087c02de425436efab1c984

This commit is contained in:
Adrian Schröter 2024-10-14 14:36:25 +02:00
commit 070ed233db
6 changed files with 241 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

3
baselibs.conf Normal file
View File

@ -0,0 +1,3 @@
libjitterentropy3
jitterentropy-devel
requires "libjitterentropy3-<targettype> = <version>"

View File

@ -0,0 +1,70 @@
From 7bf9f85d32bc6b809ca687d772bc41bd9c0ecdd8 Mon Sep 17 00:00:00 2001
From: Vladis Dronov <vdronov@redhat.com>
Date: Tue, 27 Dec 2022 13:45:03 +0100
Subject: [PATCH] fix a stack corruption on s390x
Output size of the STCKE command on s390x is 16 bytes, compared to 8 bytes
of the STCK command. Fix a stack corruption in the s390x version of
jent_get_nstime(). Add some more detailed information on the STCKE command.
Signed-off-by: Stephan Mueller <smueller@chronox.de>
---
jitterentropy-base-user.h | 43 ++++++++++++++++++++++++++++++++++-----
1 file changed, 38 insertions(+), 5 deletions(-)
diff --git a/jitterentropy-base-user.h b/jitterentropy-base-user.h
index b7d21e8..625767a 100644
--- a/jitterentropy-base-user.h
+++ b/jitterentropy-base-user.h
@@ -129,13 +129,46 @@ static inline void jent_get_nstime(uint64_t *out)
static inline void jent_get_nstime(uint64_t *out)
{
- uint64_t clk;
+ /*
+ * This is MVS+STCK code! Enable it with -S in the compiler.
+ *
+ * uint64_t clk;
+ * __asm__ volatile("stck %0" : "=m" (clk) : : "cc");
+ * *out = (uint64_t)(clk);
+ */
+
+ /*
+ * This is GCC+STCKE code. STCKE command and data format:
+ * z/Architecture - Principles of Operation
+ * http://publibz.boulder.ibm.com/epubs/pdf/dz9zr007.pdf
+ *
+ * The current value of bits 0-103 of the TOD clock is stored in bytes
+ * 1-13 of the sixteen-byte output:
+ *
+ * bits 0-7: zeros (reserved for future extention)
+ * bits 8-111: TOD Clock value
+ * bits 112-127: Programmable Field
+ *
+ * Output bit 59 (TOD-Clock bit 51) effectively increments every
+ * microsecond. Bits 60 to 111 of STCKE output are fractions of
+ * a miscrosecond: bit 59 is 1.0us, bit 60 is .5us, bit 61 is .25us,
+ * bit 62 is .125us, bit 63 is 62.5ns, etc.
+ *
+ * Some of these bits can be implemented, some not. 64 bits of
+ * the TOD clock are implemented usually nowadays, these are
+ * bits 8-71 of the output.
+ *
+ * The stepping value of TOD-clock bit position 63, if implemented,
+ * is 2^-12 microseconds, or approximately 244 picoseconds. This value
+ * is called a clock unit.
+ */
+
+ uint8_t clk[16];
- /* this is MVS code! enable with -S in the compiler */
- /*__asm__ volatile("stck %0" : "=m" (clk) : : "cc"); */
- /* this is gcc */
asm volatile("stcke %0" : "=Q" (clk) : : "cc");
- *out = (uint64_t)(clk);
+
+ /* s390x is big-endian, so just perfom a byte-by-byte copy */
+ *out = *(uint64_t *)(clk + 1);
}
#elif defined(__powerpc)

44
jitterentropy.changes Normal file
View File

@ -0,0 +1,44 @@
-------------------------------------------------------------------
Wed Mar 22 11:17:59 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
- Fix a stack corruption on s390x: [bsc#1209627]
* Output size of the STCKE command on s390x is 16 bytes, compared
to 8 bytes of the STCK command. Fix a stack corruption in the
s390x version of jent_get_nstime(). Add some more detailed
information on the STCKE command.
* github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
* Add jitterentropy-fix-a-stack-corruption-on-s390x.patch
-------------------------------------------------------------------
Mon Sep 12 07:04:35 UTC 2022 - Marcus Meissner <meissner@suse.com>
- updated to 3.4.1
* add FIPS 140 hints to man page
* simplify the test tool to search for optimal configurations
* fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
* enhancement: add ARM64 assembler code to read high-res timer
-------------------------------------------------------------------
Wed Aug 3 14:19:23 UTC 2022 - Marcus Meissner <meissner@suse.com>
- updated to 3.4.0
* enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
* fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
* enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
* fix: bug fix in initialization logic by Vladis Dronov <vdronov@redhat.com>
* fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.
-------------------------------------------------------------------
Tue Sep 28 20:19:44 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
- Trim conjecture from descriptions.
-------------------------------------------------------------------
Tue Sep 21 12:25:00 UTC 2021 - Marcus Meissner <meissner@suse.com>
- add a userspace jitter entropy generator library

98
jitterentropy.spec Normal file
View File

@ -0,0 +1,98 @@
#
# spec file for package jitterentropy
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: jitterentropy
Summary: A userspace library for jitter entropy generation
License: BSD-3-Clause OR GPL-2.0-or-later
Group: Development/Tools/Other
Version: 3.4.1
Release: 0
URL: https://github.com/smuellerDD/jitterentropy-library
Source0: https://github.com/smuellerDD/jitterentropy-library/archive/refs/tags/v%{version}.tar.gz
Source1: baselibs.conf
#PATCH-FIX-UPSTREAM github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
Patch0: jitterentropy-fix-a-stack-corruption-on-s390x.patch
%description
The Jitter RNG provides a noise source using the CPU execution
timing jitter. It depends on a high-resolution time stamp.
The design of this RNG is given in the documentation found at
http://www.chronox.de/jent.html . This documentation also covers the full
assessment of the SP800-90B compliance as well as all required test code.
%package -n libjitterentropy3
Summary: Jitter entropy generator shared library
Group: System/Libraries
%description -n libjitterentropy3
The Jitter RNG provides a noise source using the CPU execution
timing jitter. It depends on a high-resolution time stamp.
This package contains the shared library.
%package devel
Summary: Jitter entropy generator development header and library
Group: Development/Tools/Other
Requires: libjitterentropy3 = %{version}
%description devel
The Jitter RNG provides a noise source using the CPU execution
timing jitter. It depends on a high-resolution time stamp.
This package contains the development header and library.
%package devel-static
Summary: Jitter entropy generator static library
Group: Development/Tools/Other
%description devel-static
The Jitter RNG provides a noise source using the CPU execution
timing jitter. It depends on a high-resolution time stamp.
This package contains the static library.
%prep
%autosetup -n jitterentropy-library-%version
%build
%make_build PREFIX="%_prefix" LIBDIR="%_lib"
%install
%make_install PREFIX="%_prefix" LIBDIR="%_lib" all install-static
%post -n libjitterentropy3 -p /sbin/ldconfig
%postun -n libjitterentropy3 -p /sbin/ldconfig
%files devel
%license LICENSE.gplv2 LICENSE LICENSE.bsd
%_includedir/jitterentropy-base-user.h
%_includedir/jitterentropy.h
%_libdir/libjitterentropy.so
%_mandir/man3/jitterentropy.3*
%files devel-static
%license LICENSE.gplv2 LICENSE LICENSE.bsd
%_libdir/libjitterentropy.a
%files -n libjitterentropy3
%license LICENSE.gplv2 LICENSE LICENSE.bsd
%_libdir/libjitterentropy.so.3
%_libdir/libjitterentropy.so.%version
%changelog

BIN
v3.4.1.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.