On Mon, Sep 19, 2022 at 6:09 PM Ard Biesheuvel ardb@kernel.org wrote:
We no longer need at least 64 bytes of random seed to permit the early crng init to complete. The RNG is now based on Blake2s, so reduce the EFI seed size to the Blake2s hash size, which is sufficient for our purposes.
Cc: stable@vger.kernel.org # v4.14+ Signed-off-by: Ard Biesheuvel ardb@kernel.org
Reviewed-by: Jason A. Donenfeld Jason@zx2c4.com