:orphan:

.. title:: choice CSPRNG_GENERATOR_CHOICE: Cryptographically secure random generator

.. _choice_24:

.. describe:: choice CSPRNG_GENERATOR_CHOICE: Cryptographically secure random generator

*Cryptographically secure random generator*

Type: ``bool``

Help
====

.. code-block:: none

    Platform dependent cryptographically secure random number support.

    If the hardware entropy support of the platform has sufficient
    performance to support CSRNG then select that. Otherwise, select
    CTR-DRBG CSPRNG as that is a FIPS140-2 recommmended CSPRNG.

Defaults
========

- \ :kconfig:`CTR_DRBG_CSPRNG_GENERATOR <CONFIG_CTR_DRBG_CSPRNG_GENERATOR>`
- \ :kconfig:`CTR_DRBG_CSPRNG_GENERATOR <CONFIG_CTR_DRBG_CSPRNG_GENERATOR>`
- \ :kconfig:`CTR_DRBG_CSPRNG_GENERATOR <CONFIG_CTR_DRBG_CSPRNG_GENERATOR>`
- \ :kconfig:`CTR_DRBG_CSPRNG_GENERATOR <CONFIG_CTR_DRBG_CSPRNG_GENERATOR>`
- \ :kconfig:`CTR_DRBG_CSPRNG_GENERATOR <CONFIG_CTR_DRBG_CSPRNG_GENERATOR>` if \ :kconfig:`ENTROPY_MCUX_TRNG <CONFIG_ENTROPY_MCUX_TRNG>`
- \ :kconfig:`HARDWARE_DEVICE_CS_GENERATOR <CONFIG_HARDWARE_DEVICE_CS_GENERATOR>`

Choice options
==============

- \ :kconfig:`HARDWARE_DEVICE_CS_GENERATOR <CONFIG_HARDWARE_DEVICE_CS_GENERATOR>`
- \ :kconfig:`CTR_DRBG_CSPRNG_GENERATOR <CONFIG_CTR_DRBG_CSPRNG_GENERATOR>`

Kconfig definitions
===================



At ``<Zephyr SoC>/arm/nxp_kinetis/kwx/Kconfig.defconfig.mkw40z4:45``

Included via ``Kconfig:8`` → ``Kconfig.zephyr:25`` → ``<BuildDir>/kconfig/Kconfig.soc.defconfig:1`` → ``<Zephyr SoC>/arm/nxp_kinetis/Kconfig.defconfig:7`` → ``<Zephyr SoC>/arm/nxp_kinetis/kwx/Kconfig.defconfig.series:11``

Menu path: (Top)

.. code-block:: kconfig

    choice CSPRNG_GENERATOR_CHOICE
    	bool
    	default CTR_DRBG_CSPRNG_GENERATOR
    	depends on SOC_MKW40Z4 && SOC_SERIES_KINETIS_KWX

----

At ``<Zephyr SoC>/arm/nxp_kinetis/kwx/Kconfig.defconfig.mkw41z4:72``

Included via ``Kconfig:8`` → ``Kconfig.zephyr:25`` → ``<BuildDir>/kconfig/Kconfig.soc.defconfig:1`` → ``<Zephyr SoC>/arm/nxp_kinetis/Kconfig.defconfig:7`` → ``<Zephyr SoC>/arm/nxp_kinetis/kwx/Kconfig.defconfig.series:11``

Menu path: (Top)

.. code-block:: kconfig

    choice CSPRNG_GENERATOR_CHOICE
    	bool
    	default CTR_DRBG_CSPRNG_GENERATOR
    	depends on SOC_MKW41Z4 && SOC_SERIES_KINETIS_KWX

----

At ``<Zephyr SoC>/arm/nxp_kinetis/kwx/Kconfig.defconfig.mkw40z4:45``

Included via ``Kconfig:8`` → ``Kconfig.zephyr:27`` → ``<Zephyr SoC>/arm/nxp_kinetis/Kconfig.defconfig:7`` → ``<Zephyr SoC>/arm/nxp_kinetis/kwx/Kconfig.defconfig.series:11``

Menu path: (Top)

.. code-block:: kconfig

    choice CSPRNG_GENERATOR_CHOICE
    	bool
    	default CTR_DRBG_CSPRNG_GENERATOR
    	depends on SOC_MKW40Z4 && SOC_SERIES_KINETIS_KWX

----

At ``<Zephyr SoC>/arm/nxp_kinetis/kwx/Kconfig.defconfig.mkw41z4:72``

Included via ``Kconfig:8`` → ``Kconfig.zephyr:27`` → ``<Zephyr SoC>/arm/nxp_kinetis/Kconfig.defconfig:7`` → ``<Zephyr SoC>/arm/nxp_kinetis/kwx/Kconfig.defconfig.series:11``

Menu path: (Top)

.. code-block:: kconfig

    choice CSPRNG_GENERATOR_CHOICE
    	bool
    	default CTR_DRBG_CSPRNG_GENERATOR
    	depends on SOC_MKW41Z4 && SOC_SERIES_KINETIS_KWX

----

At ``<Zephyr Driver>/entropy/Kconfig.mcux:42``

Included via ``Kconfig:8`` → ``Kconfig.zephyr:42`` → ``<Zephyr Driver>/Kconfig:32`` → ``<Zephyr Driver>/entropy/Kconfig:15``

Menu path: (Top) → Device Drivers → Entropy Drivers

.. code-block:: kconfig

    choice CSPRNG_GENERATOR_CHOICE
    	bool
    	default CTR_DRBG_CSPRNG_GENERATOR if ENTROPY_MCUX_TRNG
    	depends on ENTROPY_GENERATOR

----

At ``<Zephyr Subsystem>/random/Kconfig:72``

Included via ``Kconfig:8`` → ``Kconfig.zephyr:44`` → ``<Zephyr Subsystem>/Kconfig:53``

Menu path: (Top) → Sub Systems and OS Services → Random Number Generators

.. code-block:: kconfig

    choice CSPRNG_GENERATOR_CHOICE
    	bool "Cryptographically secure random generator"
    	default HARDWARE_DEVICE_CS_GENERATOR
    	help
    	  Platform dependent cryptographically secure random number support.
	  
    	  If the hardware entropy support of the platform has sufficient
    	  performance to support CSRNG then select that. Otherwise, select
    	  CTR-DRBG CSPRNG as that is a FIPS140-2 recommmended CSPRNG.

*(The 'depends on' condition includes propagated dependencies from ifs and menus.)*