On 2014-04-26, Miod Vallat <m...@online.fr> wrote: >> The question I have is can I disable the random number generator?s use of >> that instruction? I?d rather be on -current than years old. > > Apart from the following hammer, I see no easy way to achieve this. > > Index: i386/machdep.c >=================================================================== > RCS file: /cvs/src/sys/arch/i386/i386/machdep.c,v > retrieving revision 1.536 > diff -u -p -r1.536 machdep.c > --- i386/machdep.c 29 Mar 2014 18:09:29 -0000 1.536 > +++ i386/machdep.c 26 Apr 2014 19:13:14 -0000 > @@ -1964,7 +1964,8 @@ identifycpu(struct cpu_info *ci) > } > > if (ci->ci_flags & CPUF_PRIMARY) { > - if (cpu_ecxfeature & CPUIDECX_RDRAND) > + if (cpu_ecxfeature & CPUIDECX_RDRAND && > + vendor != CPUVENDOR_CYRIX) > has_rdrand = 1; > #ifndef SMALL_KERNEL > if (ci->ci_feature_sefflags & SEFF0EBX_SMAP) > >
Funnily enough it's handled here: http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5702e965d759dde8a098d8108660721ba2b93a7d http://rt.openssl.org/Ticket/Display.html?id=3005&user=guest&pass=guest