Commit 0f8e07e
authored
Remove jent_read_entropy_safe usage from AWS-LC (main) (#2110)
### Issues:
`P186365975`
### Description of changes:
These changes remove any usage of jent_read_entropy_safe function from
AWS-LC. This function has an implementation vulnerability described
[here](https://github.com/smuellerDD/jitterentropy-library/blob/c62c88645f27716f78e1267a182cff40e96081c2/SECURITY.md#2024-12-30).
jent_read_entropy_safe is now unused in our codebase, however, it is
still present in the Jitter code. These changes are outside the FIPS
boundary and do not impact the FIPS integrity hash.
### Call-outs:
Eventually, we should pull in the newest Jitter release with the
security fix.
### Testing:
How is this change tested (unit tests, fuzz tests, etc.)? Are there any
testing steps to be verified by the reviewer?
By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license and the ISC license.1 parent 13a330b commit 0f8e07e
1 file changed
+4
-6
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
44 | | - | |
45 | | - | |
46 | | - | |
47 | | - | |
| 44 | + | |
| 45 | + | |
48 | 46 | | |
49 | 47 | | |
50 | 48 | | |
| |||
60 | 58 | | |
61 | 59 | | |
62 | 60 | | |
63 | | - | |
64 | | - | |
| 61 | + | |
| 62 | + | |
65 | 63 | | |
66 | 64 | | |
67 | 65 | | |
| |||
0 commit comments