From a593fbe90c5943d2543e7cd79d917a0986fbeac3 Mon Sep 17 00:00:00 2001 From: Lealem Amedie Date: Wed, 17 Jun 2026 09:45:20 -0600 Subject: [PATCH 1/2] configure: avoid entropy fallback for AMD RDSEED in FIPS builds --- configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index bdf5d3df29..a844b90c9f 100644 --- a/configure.ac +++ b/configure.ac @@ -7049,7 +7049,7 @@ AS_CASE([$FIPS_VERSION], (test "$FIPS_VERSION" != "v5-dev" || test "$enable_hkdf" != "no")], [ENABLED_HKDF="yes"; AM_CFLAGS="$AM_CFLAGS -DHAVE_HKDF"]) - AS_IF([test "$ENABLED_INTELASM" = "yes"], + AS_IF([test "$ENABLED_INTELASM" = "yes" || test "$ENABLED_AMDRDSEED" = "yes" ], [AM_CFLAGS="$AM_CFLAGS -DFORCE_FAILURE_RDSEED"]) AS_IF([test "$ENABLED_SHA512" = "no" && From a3ca9e1dfa288a387a3b5cf3c7de42c6a1187857 Mon Sep 17 00:00:00 2001 From: Lealem Amedie Date: Wed, 17 Jun 2026 11:12:55 -0600 Subject: [PATCH 2/2] Fix FORCE_FAILURE_RDSEED case guard --- configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index a844b90c9f..c1d2dd089e 100644 --- a/configure.ac +++ b/configure.ac @@ -7049,7 +7049,7 @@ AS_CASE([$FIPS_VERSION], (test "$FIPS_VERSION" != "v5-dev" || test "$enable_hkdf" != "no")], [ENABLED_HKDF="yes"; AM_CFLAGS="$AM_CFLAGS -DHAVE_HKDF"]) - AS_IF([test "$ENABLED_INTELASM" = "yes" || test "$ENABLED_AMDRDSEED" = "yes" ], + AS_IF([test "$ENABLED_INTELRDSEED" = "yes" || test "$ENABLED_AMDRDSEED" = "yes" ], [AM_CFLAGS="$AM_CFLAGS -DFORCE_FAILURE_RDSEED"]) AS_IF([test "$ENABLED_SHA512" = "no" &&