[Cryptech Tech] Suggested changes to TRNG

Rob Austein sra at hactrn.net
Wed Sep 30 13:45:16 UTC 2015


At Wed, 30 Sep 2015 15:37:35 +0200, Joachim Strömbergson wrote:
> 
> If its just the SW is allowed to write entropy part that is scary, the
> easiest thing is to kill the API access during compilation. Basically
> placing the logic that decodes the specific address and updates the
> entropy source fifo with write_data in an ifdef ALLOW_ENTOPY_WRITES
> clause. If not defined, that address will not work and the logic will
> not be inside the FPGA.
> 
> Sounds ok?

This would address the issue I raised, yes.

See previous message about `includeing an automatically generated
configuration file vs patching source, but that's a detail.


More information about the Tech mailing list