summary refs log tree commit diff
path: root/pkgs/tools
diff options
context:
space:
mode:
authorDaniel Schaefer <git@danielschaefer.me>2018-10-23 23:36:57 +0200
committerDaniel Schaefer <git@danielschaefer.me>2018-10-23 23:36:57 +0200
commit8ada6f6c468b195c5839b8b4b6e22c797a2bad56 (patch)
tree9ece59ccb1c4822e924814bb955e4c2579d010ab /pkgs/tools
parent5c249a3245912a27d82e292917d0a3dd0a90cbba (diff)
downloadnixlib-8ada6f6c468b195c5839b8b4b6e22c797a2bad56.tar
nixlib-8ada6f6c468b195c5839b8b4b6e22c797a2bad56.tar.gz
nixlib-8ada6f6c468b195c5839b8b4b6e22c797a2bad56.tar.bz2
nixlib-8ada6f6c468b195c5839b8b4b6e22c797a2bad56.tar.lz
nixlib-8ada6f6c468b195c5839b8b4b6e22c797a2bad56.tar.xz
nixlib-8ada6f6c468b195c5839b8b4b6e22c797a2bad56.tar.zst
nixlib-8ada6f6c468b195c5839b8b4b6e22c797a2bad56.zip
jitterentropy: init at 2.1.2
Diffstat (limited to 'pkgs/tools')
-rw-r--r--pkgs/tools/security/rng-tools/default.nix6
1 files changed, 5 insertions, 1 deletions
diff --git a/pkgs/tools/security/rng-tools/default.nix b/pkgs/tools/security/rng-tools/default.nix
index 3a6c1cecdf18..86a5a1b7c396 100644
--- a/pkgs/tools/security/rng-tools/default.nix
+++ b/pkgs/tools/security/rng-tools/default.nix
@@ -5,6 +5,9 @@
 , curl ? null, libxml2 ? null, openssl ? null, withNistBeacon ? false
   # Systems that support RDRAND but not AES-NI require libgcrypt to use RDRAND as an entropy source
 , libgcrypt ? null, withGcrypt ? true
+  # Not sure if jitterentropy is safe to use for cryptography
+  # and thus a default entropy source
+, jitterentropy ? null, withJitterEntropy ? false
 }:
 with stdenv.lib;
 stdenv.mkDerivation rec {
@@ -23,11 +26,12 @@ stdenv.mkDerivation rec {
   preConfigure = "./autogen.sh";
 
   configureFlags =
-       [ "--disable-jitterentropy" ]
+       optional (!withJitterEntropy) "--disable-jitterentropy"
     ++ optional (!withNistBeacon) "--without-nistbeacon"
     ++ optional (!withGcrypt) "--without-libgcrypt";
 
   buildInputs = [ sysfsutils ]
+    ++ optional withJitterEntropy [ jitterentropy ]
     ++ optional withGcrypt [ libgcrypt.dev ]
     ++ optional withNistBeacon [ openssl.dev curl.dev libxml2.dev ];