Allocate DRBG additional data pool from non-secure memory
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Sat, 20 Jul 2019 09:22:46 +0000 (11:22 +0200)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Mon, 22 Jul 2019 11:37:13 +0000 (13:37 +0200)
commit1372560f64c9a7cfad1979fa8c41bee335a04373
tree0e36898357cc623e3d0904921d091ba2c4b38ff8
parenta8f1aabd4b44db668bca638c111598b2e0688cc4
Allocate DRBG additional data pool from non-secure memory

The additional data allocates 12K per DRBG instance in the
secure memory, which is not necessary. Also nonces are not
considered secret.

[extended tests]

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/9423)
crypto/include/internal/rand_int.h
crypto/rand/drbg_lib.c
crypto/rand/rand_crng_test.c
crypto/rand/rand_lcl.h
crypto/rand/rand_lib.c