Move estimate of RDRAND/RDSEED entropy to build.h

GH #370 for background

1 files changed, 1 insertions, 11 deletions

diff --git a/src/lib/entropy/rdrand/rdrand.cpp b/src/lib/entropy/rdrand/rdrand.cpp
index 178c52798..24fe98cf8 100644
--- a/src/lib/entropy/rdrand/rdrand.cpp
+++ b/src/lib/entropy/rdrand/rdrand.cpp
@@ -22,16 +22,6 @@ void Intel_Rdrand::poll(Entropy_Accumulator& accum)
    if(!CPUID::has_rdrand())
       return;
 
-   /*
-   Don't consider rdrand as contributing any entropy to the poll. It doesn't
-   make sense to trust uninspectible hardware.
-
-   Even if backdoored, rdrand cannot harm us because the HMAC_RNG poll process
-   is designed to handle arbitrarily large amounts of attacker known/chosen
-   input (or even a reseed where every bit we reseeded with was attacker chosen),
-   as long as at least one seed occurred with enough unknown-to-attacker entropy.
-   */
-   const double ENTROPY_ESTIMATE = 0.0;
    const size_t RDRAND_POLLS = 32;
 
    for(size_t i = 0; i != RDRAND_POLLS; ++i)
@@ -49,7 +39,7 @@ void Intel_Rdrand::poll(Entropy_Accumulator& accum)
 #endif
 
       if(cf == 1)
-         accum.add(r, ENTROPY_ESTIMATE);
+         accum.add(r, BOTAN_ENTROPY_ESTIMATE_HARDWARE_RNG);
       }
    }