stack.yaml: Completely disable RDRAND support in cryptonite

cardano-foundation · Sep 8, 2020 · dc160c6 · dc160c6
1 parent d7dc954
commit dc160c6
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/nix/.stack.nix/default.nix b/nix/.stack.nix/default.nix
diff --git a/stack.yaml b/stack.yaml
@@ -65,6 +65,11 @@ flags:
   cardano-crypto-praos:
     external-libsodium-vrf: false
 
+  # Using RDRAND instead of /dev/urandom as an entropy source for key
+  # generation is dubious. Set the flag so we use /dev/urandom by default.
+  cryptonite:
+    support_rdrand: false
+
 # Generate files required by Weeder.
 # See https://github.com/ndmitchell/weeder/issues/53
 ghc-options: {"$locals": -ddump-to-file -ddump-hi}