Add advice to reseed the RNG if the application is cloned

Signed-off-by: Gilles Peskine <[email protected]>
2026-09-11 12:59:54 +00:00 · 2026-03-09 18:06:38 +01:00
parent de1a7f2fbb
commit fc38b65561
1 changed files with 7 additions and 0 deletions
@@ -4,3 +4,10 @@ Features
     psa_random_deplete() to force a reseed on the next random generator call.
   * Applications can call psa_random_set_prediction_resistance() to toggle
     prediction resistance in the PSA random generator.
+
+Security
+   * Applications running in environments where the application state is
+     cloned () should arrange to reseed the random generator using one
+     of the new functions psa_random_reseed() or psa_random_deplete().
+     CVE-2026-25835
+