Krishna,

Thanks for your review comments.
The updated webrev is:

http://cr.opensolaris.org/~haimay/CR6703956-v2/


Krishna Yenduri wrote:
> Hai-May,
> 
>  I have an update to an earlier comment and a new comment.
> 
> Regards,
> -Krishna
>  
>> Hai-May Chao wrote:
>>>
>>> I updated my webrev with review comments from Dan and Ferenc.
>>> The updated webrev is  at:
>>>
>>> http://cr.opensolaris.org/~haimay/CR6703956-v1/
> 
>> ...
>>
>> KY-1    T3      lines 33-34, 106, 135
>> fips_add160() expects val1 and val2 to be in big-endian
>> format. I assume the correctness of the operation depends
>> on that.
>>
>> If so, you need to do some conversion for little-endian
>> case, on lines 106 and 135.
> 
>  Thinking a bit further, I don't see the need for these arguments
>  to be in big-endian format since it does not matter whether
>  a 160-bit random number is reversed for the purpose of a PRNG.
>  Recommend just fixing the comment.
> 

No change made.

>> usr/src/uts/common/crypto/api/kcf_random.c
>>
> 
>  KY-10   T2    lines 667-668
> 
>  
>  fips_random_inner() overwrites  the  third argument.  This is not
>  what we want here. Recommend passing a local variable instead.
>  Also, bzero it after the call.
> 

Fixed.

Thanks,
Hai-May

Reply via email to