OpenSolaris

Generating random data and non-zero random data is useful to applications outside of pkcs11.  There is nothing inherently pkcs11 specific about making random data and making nonzero random data, so it can be factored out of pkcs11 and made available to other applications.  Lofi with encryption support is one example of an application that could use random functions to generate its ephemeral keys.  Lack of a pkcs11-unencumbered non-zero random function prevented moving ECC implementation code into a standalone crypto library with other crypto algorithms.  Libcryptoutil seems a reasonable place to move them.

Rewrite a non-zero random function for lofi encryption support and embed in lofi.  However, once you've done that, you've already done 95% of the work for this RFE to make it generally available.

N/A