Re: [PATCH 08/10] md, cipher: allow internal users to skip fast random poll

On 03/08/2026 15:47, Werner Koch via Gcrypt-devel wrote:
> On Sun,  2 Aug 2026 12:55, Jussi Kivilinna said:
> 
>> 'md_open' and 'cipher_open' call '_gcry_fast_random_poll', which takes
>> pool lock, reads RDRAND and mixes CSPRNG pool. ML-KEM and ML-DSA
>> route SHAKE through the md interface and open one handle per polynomial,
> 
> Sounds okay for me.  The random poll things used to be effective when
> random bytes were scarce which is for most platforms not anymore the
> case.
> 

Another approach that I was thinking of would have be to limit
md_open/cipher_open random pool to first md_open/cipher_open call
per application. But maybe that would be detrimental for platforms
with limited random sources.

-Jussi