Re: [mbed-tls] support mbedTLS no entropy source - mbed-tls

25 May 2020

      Hi Palomo,
You seem to be compiling for a system with a Linux kernel, but with only
a partial Unix userland. The “Unix” code in the entropy_poll module
might work on your system, but it is only enabled if __unix__ or __unix
(or a few others) is defined.
Can you please try the attached patch? Does your runtime environment
have /dev/urandom ?
Regarding the knowledge base article, you need to remove the "."
character at the end of the URL:
https://tls.mbed.org/kb/how-to/add-a-random-generator--
Gilles Peskine
Mbed TLS developer
On 19/05/2020 21:43, Jesus Gualberto Palomo Garcia via mbed-tls wrote:
...
Hello Hanno, Thanks for your thanks for you quickly replay.
I have an error compilation, I'm using nios2-linux-uclibc for my cross
compilation and uclinux architecture,
the linux kernel is 2.60 but I have this error when I try to compile
the library, I want to use the library as a simple client using TLS1.2
$ make static
  CC    aes.c
  CC    aesni.c
  CC    arc4.c
  CC    aria.c
  CC    asn1parse.c
  CC    asn1write.c
  CC    base64.c
  CC    bignum.c
  CC    blowfish.c
  CC    camellia.c
  CC    ccm.c
  CC    chacha20.c
  CC    chachapoly.c
  CC    cipher.c
  CC    cipher_wrap.c
  CC    cmac.c
  CC    ctr_drbg.c
  CC    des.c
  CC    dhm.c
  CC    ecdh.c
  CC    ecdsa.c
  CC    ecjpake.c
  CC    ecp.c
  CC    ecp_curves.c
  CC    entropy.c
  CC    entropy_poll.c
entropy_poll.c:56:2: #error "Platform entropy sources only work on
Unix and Windows, see MBEDTLS_NO_PLATFORM_ENTROPY in config.h"
Makefile:285: recipe for target 'entropy_poll.o' failed
make: *** [entropy_poll.o] Error 1
BTW the article is not
found https://tls.mbed.org/kb/how-to/add-a-random-generator.
https://tls.mbed.org/kb/how-to/add-a-random-generator.
Many thanks!!
On Tue, May 19, 2020 at 9:01 AM Hanno Becker <Hanno.Becker@arm.com
mailto:Hanno.Becker@arm.com> wrote:
Hi Palomo,

Please take a look at the recent
thread https://lists.trustedfirmware.org/pipermail/mbed-tls/2020-April/000069.html 
which should give you a better understanding of how Mbed TLS
manages and uses entropy from the underlying system.

Regards,
Hanno
------------------------------------------------------------------------
*From:* mbed-tls <mbed-tls-bounces@lists.trustedfirmware.org
<mailto:mbed-tls-bounces@lists.trustedfirmware.org>> on behalf of
Jesus Gualberto Palomo Garcia via mbed-tls
<mbed-tls@lists.trustedfirmware.org
<mailto:mbed-tls@lists.trustedfirmware.org>>
*Sent:* Tuesday, May 19, 2020 2:56 PM
*To:* mbed-tls@lists.trustedfirmware.org
<mailto:mbed-tls@lists.trustedfirmware.org>
<mbed-tls@lists.trustedfirmware.org
<mailto:mbed-tls@lists.trustedfirmware.org>>
*Subject:* [mbed-tls] support mbedTLS no entropy source

Hi all!

I'm Palomo and I've been working with your library a few weeks
ago, I'm using Linux kernel 2.60 but my embedded system has a
limit entropy source, i now that this is a critical point, but How
can I use your library if I want to use a other entropy source? 

Thanks and waiting for you!

-- 
*¡Saludos! Best wishes!*
*
*
*
/*Jesus** Palomo*/

México, D.F.

*

-- 
*¡Saludos! Best wishes!*

/*Jesus** Palomo*/
México, D.F.