From 2396b21f8015e58bfb9ef35f6a5da69eb46ab3bf Mon Sep 17 00:00:00 2001 From: Mateusz Starzyk Date: Wed, 19 May 2021 16:35:51 +0200 Subject: [PATCH] Provide more in-depth migration guide after removal of null entropy. Signed-off-by: Mateusz Starzyk --- docs/3.0-migration-guide.d/remove-null-entropy.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/docs/3.0-migration-guide.d/remove-null-entropy.md b/docs/3.0-migration-guide.d/remove-null-entropy.md index d6c39057f0..50e024a2a5 100644 --- a/docs/3.0-migration-guide.d/remove-null-entropy.md +++ b/docs/3.0-migration-guide.d/remove-null-entropy.md @@ -4,6 +4,8 @@ Remove the option to build the library without any entropy sources This does not affect users who use the default `config.h`, as this option was already off by default. -If you were using the `MBEDTLS_TEST_NULL_ENTROPY` option, you can either use -`MBEDTLS_ENTROPY_NV_SEED` or create a fake entropy function. - +If you were using the `MBEDTLS_TEST_NULL_ENTROPY` option and your platform +doesn't have any entropy source, you should use `MBEDTLS_ENTROPY_NV_SEED` +and make sure your device is provisioned with a strong random seed. +Alternatively, for testing purposes only, you can create and register a fake +entropy function.