K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2022-02-14T02:53:05.767992Z
K 7
svn:log
V 762
random(4): Add regression tests for uint128 implementation, Chacha CTR

Add some basic regression tests to verify behavior of both uint128
implementations at typical boundary conditions, to run on all architectures.

Test uint128 increment behavior of Chacha in keystream mode, as used by
'kern.random.use_chacha20_cipher=1' (r344913) to verify assumptions at edge
cases.  These assumptions are critical to the safety of using Chacha as a
PRF in Fortuna (as implemented).

(Chacha's use in arc4random is safe regardless of these tests, as it is
limited to far less than 4 billion blocks of output in that API.)

(cherry picked from commit 403c041316da859b91c048b5daeea61bc366e92f)

Git Hash:   d4b15220f5f13edd9b3159034a93a7ca216fa558
Git Author: cem@FreeBSD.org
END