Re: kern/54897 (ipsec tests now fail randomly on real hardware)

[Andreas Gustafsson <gson%gson.org@localhost>]

The following reply was made to PR kern/54897; it has been noted by GNATS.

From: Andreas Gustafsson <gson%gson.org@localhost>
To: dholland%NetBSD.org@localhost, gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: kern/54897 (ipsec tests now fail randomly on real hardware)
Date: Sun, 25 Jul 2021 12:26:03 +0300

 dholland%NetBSD.org@localhost wrote:
 > Is this fixed?
 
 As the latest update said, "it's a workaround", not a fix.  Per the
 cprng_fast64 man page, the only difference between cprng_fast64 and
 cprng_strong64 is supposed to be that the latter provides forward
 secrecy.  That difference should not affect the probability of
 duplicate outputs, so if the test is failing with with cprng_fast64
 but passing with cprng_strong64, that suggests there is something
 seriously wrong with cprng_fast64, and this still needs to be
 investigated.
 -- 
 Andreas Gustafsson, gson%gson.org@localhost