From ca0ed3a78cc2414706a59384d50b9048e1f00357 Mon Sep 17 00:00:00 2001 From: Cristian Rodríguez Date: Aug 08 2022 08:49:52 +0000 Subject: gcrypt: prefer the OS RNG by default, gcrypt defaults to an userspace RNG, this is the wrong thing (tm) to do on linux. Switch to the SYSTEM rng instead. (cherry picked from commit 80f967311ac53ae43b5a26332f32cc6665661338) --- diff --git a/src/basic/gcrypt-util.c b/src/basic/gcrypt-util.c index 64c63cd..1927fdf 100644 --- a/src/basic/gcrypt-util.c +++ b/src/basic/gcrypt-util.c @@ -15,6 +15,8 @@ void initialize_libgcrypt(bool secmem) { * feature should initialize the library manually */ if (!secmem) gcry_control(GCRYCTL_DISABLE_SECMEM); + + gcry_control(GCRYCTL_SET_PREFERRED_RNG_TYPE, GCRY_RNG_TYPE_SYSTEM); gcry_control(GCRYCTL_INITIALIZATION_FINISHED, 0); }