20260907-RNG-extras

.github/workflows/codespell.yml

@@ -27,7 +27,7 @@ jobs:
         check_filenames: true
         check_hidden: true
           # Add comma separated list of words that occur multiple times that should be ignored (sorted alphabetically, case sensitive)
-        ignore_words_list: adin,ameba,aNULL,brunch,carryIn,chainG,ciph,cLen,cliKs,cna,dout,FPR,fpr,haveA,inCreated,inOut,inout,larg,LEAPYEAR,Merget,optionA,parm,parms,repid,rIn,userA,ser,siz,te,Te,HSI,failT,toLen,vor,
+        ignore_words_list: adin,ameba,aNULL,brunch,carryIn,chainG,ciph,cLen,cliKs,cna,dout,FPR,fpr,haveA,inCreated,inOut,inout,larg,LEAPYEAR,Merget,optionA,parm,parms,repid,rIn,userA,ser,siz,te,Te,HSI,failT,toLen,vor,checkin
           # The exclude_file contains lines of code that should be ignored. This is useful for individual lines which have non-words that can safely be ignored.
         exclude_file: '.codespellexcludelines'
           # To skip files entirely from being processed, add it to the following list:

.wolfssl_known_macro_extras

@@ -63,6 +63,7 @@ CIOCGSESSINFO
 CLOCK_MONOTONIC
 CMSIS_OS2_H_
 COMPONENT_WOLFSSL
+CONFIG_ACPI
 CONFIG_ARCH_CHIP_STM32F746ZG
 CONFIG_ARCH_CHIP_STM32H743ZI
 CONFIG_ARCH_CHIP_STM32L552ZE
@@ -155,6 +156,7 @@ CONFIG_NET_SOCKETS_SOCKOPT_TLS
 CONFIG_NEWLIB_LIBC
 CONFIG_NEWLIB_NANO_FORMAT
 CONFIG_PICOLIBC
+CONFIG_PM_SLEEP
 CONFIG_POSIX_API
 CONFIG_POSIX_THREADS
 CONFIG_PREEMPT_COUNT
@@ -787,6 +789,7 @@ WC_HASH_CUSTOM_MAX_BLOCK_SIZE
 WC_HASH_CUSTOM_MAX_DIGEST_SIZE
 WC_HASH_CUSTOM_MIN_DIGEST_SIZE
 WC_INIT_ERROR_WHEN_CONTENDED
+WC_LINUXKM_NO_ENTROPY_DAEMON
 WC_LINUXKM_NO_USE_HEAP_WRAPPERS
 WC_LINUXKM_SVR_NO_BATCHING
 WC_MLDSA_NO_ASM
@@ -801,8 +804,22 @@ WC_PKCS12_PBKDF_USING_MP_API
 WC_PROTECT_ENCRYPTED_MEM
 WC_PUF_HELPER_COMPACT
 WC_PUF_SHA3
+WC_RNG_BANK_NO_DAEMON_SUPPORT
 WC_RNG_BANK_NO_DEFAULT_SUPPORT
 WC_RNG_BLOCKING
+WC_RNG_NO_FREE_HOOK
+WC_RNG_NO_LOCK
+WC_RNG_NO_LOCK_FULL_MUTEX
+WC_RNG_NO_NEXT_SEED
+WC_RNG_NO_POOL
+WC_RNG_NO_RBGC
+WC_RNG_NO_RBGC_RESEED
+WC_RNG_WANT_FREE_HOOK
+WC_RNG_WANT_LOCK
+WC_RNG_WANT_LOCK_FULL_MUTEX
+WC_RNG_WANT_NEXT_SEED
+WC_RNG_WANT_POOL
+WC_RNG_WANT_RBGC
 WC_RSA_NONBLOCK_TIME
 WC_RSA_NO_FERMAT_CHECK
 WC_RTL8735B_NO_DERIVE_CACHE

configure.ac

@@ -1700,6 +1700,7 @@ then
     test "$enable_base16" = "" && enable_base16=yes
     test "$enable_ssh" = "" && test "$enable_hmac" != "no" && enable_ssh=yes
     test "$enable_rng_bank" = "" && enable_rng_bank=yes
+    test "$enable_rng_extras" = "" && enable_rng_extras=yes
     test "$enable_dh" = "" && enable_dh=yes
     test "$enable_defaultdhparams" = "" && enable_defaultdhparams=yes
 
@@ -1917,6 +1918,8 @@ then
         test "$enable_supportedcurves" = "" && enable_supportedcurves=yes
     fi
     test "$enable_rng" != "no" && test "$enable_rng_bank" = "" && enable_rng_bank=yes
+    test "$enable_rng" != "no" && test "$enable_rng_extras" = "" && enable_rng_extras=yes
+
     if test "$ENABLED_FIPS" = "no" || test "$HAVE_FIPS_VERSION" -ge 6
     then
         test "$enable_aes" != "no" && test "$enable_aescfb" = "" && enable_aescfb=yes
@@ -2788,6 +2791,20 @@ then
     AM_CFLAGS="$AM_CFLAGS -DWC_NO_RNG"
 fi
 
+
+# RNG extras
+AC_ARG_ENABLE([rng-extras],
+    [AS_HELP_STRING([--enable-rng-extras],[Enable RNG locks, pools, RBGC, and daemon support (default: disabled)])],
+    [ ENABLED_RNG_EXTRAS=$enableval ],
+    [ ENABLED_RNG_EXTRAS=$KERNEL_MODE_DEFAULTS ]
+    )
+
+if test "$ENABLED_RNG_EXTRAS" = "yes"
+then
+    AM_CFLAGS="$AM_CFLAGS -DWC_RNG_EXTRAS"
+fi
+
+
 AC_ARG_ENABLE([rng-bank],
     [AS_HELP_STRING([--enable-rng-bank],[Enable compiling and using RNG banks (default: disabled)])],
     [ ENABLED_RNG_BANK=$enableval ],
@@ -7167,7 +7184,8 @@ AS_CASE([$FIPS_VERSION],
             -DECC_USER_CURVES \
             -DHAVE_ECC384 \
             -DHAVE_ECC521 \
-            -DWOLFSSL_VALIDATE_FFC_IMPORT"
+            -DWOLFSSL_VALIDATE_FFC_IMPORT \
+            -DWC_RNG_EXTRAS"
 
         # KCAPI API does not support custom k for sign, don't force enable ECC key sizes and don't use seed callback
         AS_IF([test "x$ENABLED_KCAPI_ECC" = "xno"],