Add RDRAND_RNG

For those that are willing to trust uninspectible hardware. :)

Changes RDRAND entropy source to call RDRAND_RNG

Add --rdrand flag to rng cmdlet

1 files changed, 14 insertions, 1 deletions

diff --git a/src/cli/utils.cpp b/src/cli/utils.cpp
index 76e445126..b0d364581 100644
--- a/src/cli/utils.cpp
+++ b/src/cli/utils.cpp
@@ -20,6 +20,10 @@
   #include <botan/system_rng.h>
 #endif
 
+#if defined(BOTAN_HAS_RDRAND_RNG)
+  #include <botan/rdrand_rng.h>
+#endif
+
 #if defined(BOTAN_HAS_HTTP_UTIL)
   #include <botan/http_util.h>
 #endif
@@ -149,7 +153,7 @@ BOTAN_REGISTER_COMMAND("hash", Hash);
 class RNG final : public Command
    {
    public:
-      RNG() : Command("rng --system *bytes") {}
+      RNG() : Command("rng --system --rdrand *bytes") {}
 
       void go() override
          {
@@ -164,6 +168,15 @@ class RNG final : public Command
             return;
 #endif
             }
+         else if(flag_set("rdrand"))
+            {
+#if defined(BOTAN_HAS_RDRAND_RNG)
+            rng.reset(new Botan::RDRAND_RNG);
+#else
+            error_output() << "rdrand_rng disabled in build\n";
+            return;
+#endif
+            }
          else
             {
             rng.reset(new Botan::AutoSeeded_RNG);