| commit | 3b4a281bd20d3e88efae159fd722dd4292380c02 | [log] [tgz] |
|---|---|---|
| author | H. Peter Anvin <hpa@linux.intel.com> | Wed Aug 01 14:31:41 2012 -0700 |
| committer | Jeff Garzik <jgarzik@redhat.com> | Thu Aug 02 00:19:09 2012 -0400 |
| tree | e90ff980559a40bb80fd6849be3eb4afd048953d | |
| parent | 0044517d087c442225891dd9a26ff52a602a295b [diff] |
rngd: As long as FIPS error rates are low, re-try the same source Allow for a small number of FIPS errors before advancing to the next source. This prevents a high bandwidth source from stalling out by shifting to a low bandwidth source (e.g. DRNG->TPM) just because of a single FIPS failure. FIPS failures are frequent enough (1:1250) that this happens on a regular basis. Signed-off-by: H. Peter Anvin <hpa@linux.intel.com> Signed-off-by: Jeff Garzik <jgarzik@redhat.com>