[crac] RFR: Reseed NativePRNG on checkpoint restore [v3]
akozlov at openjdk.java.net
Thu Jan 13 16:13:05 UTC 2022
On Thu, 13 Jan 2022 10:47:36 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:
>> NativePRNG should be re-seeded during checkpoint/restore because it uses SHA1PRNG secure random for additional seed. It is seeded at initialization, so it is not re-seeded automatically during checkpoint/restore
>> Also, the internal buffer should be cleared at the checkpoint.
> Alexey Bakhtin has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains four additional commits since the last revision:
> - Prevent NativePRNG usage in the beforeCheckpoint/afterRestore
> - Merge branch 'crac' of https://github.com/openjdk/crac into NativePRNG
> - Use ReentrantReadWriteLock
> - Reseed NativePRNG on checkpoint restore
Marked as reviewed by akozlov (Lead).
More information about the crac-dev