tree 128fcdf3a4d98ee57bc21792e36a7a5ce1da63d1
parent 5274cea40447aad76a7bb8c7c8693e9c4ee39aef
author Adam Langley <alangley@gmail.com> 1558641938 -0700
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1558643294 +0000

Disable RDRAND on AMD chips before Zen.

There are reports that RDRAND on these chips can fail. Thus this change
disables the use RDRAND. Outside of FIPS mode, RDRAND is only used for
protection against forks and VM clones anyway.

(Note: I don't have any AMD chips to test on, so this is done blindly
from AMD's docs.)

Change-Id: Id61b2f6ba74c5ecf66804f7268a26e480a5bf815
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/36144
Commit-Queue: Adam Langley <alangley@gmail.com>
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: David Benjamin <davidben@google.com>