[tor-bugs] #10402 [Tor]: Force disable use of RDRAND in OpenSSL when HardwareAccel is enabled

[Tor Bug Tracker & Wiki]

#10402: Force disable use of RDRAND in OpenSSL when HardwareAccel is enabled
------------------------+---------------------------------------------
     Reporter:  anon    |      Owner:
         Type:  defect  |     Status:  needs_review
     Priority:  major   |  Milestone:  Tor: 0.2.5.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  024-backport tor-relay security
Actual Points:          |  Parent ID:
       Points:          |
------------------------+---------------------------------------------
Changes (by nickm):

 * keywords:   => 024-backport tor-relay security


Comment:

 The engine table code is a bit tricky to follow, and the API is a bit odd.
 Has anybody used a debugger or other tool to verify that after
 unregistering the engine, we really get the original PRNG ?  (That is, to
 check that that the md_rand.c code is called, and the eng_rdrand.c code is
 not.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10402#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online