From fc38b65561d00399ab4fed9c921cf09a721e3012 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Mon, 9 Mar 2026 18:05:22 +0100 Subject: [PATCH] Add advice to reseed the RNG if the application is cloned Signed-off-by: Gilles Peskine --- ChangeLog.d/rng-cloning.txt | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/ChangeLog.d/rng-cloning.txt b/ChangeLog.d/rng-cloning.txt index 71ef04e942..e285159f44 100644 --- a/ChangeLog.d/rng-cloning.txt +++ b/ChangeLog.d/rng-cloning.txt @@ -4,3 +4,10 @@ Features psa_random_deplete() to force a reseed on the next random generator call. * Applications can call psa_random_set_prediction_resistance() to toggle prediction resistance in the PSA random generator. + +Security + * Applications running in environments where the application state is + cloned () should arrange to reseed the random generator using one + of the new functions psa_random_reseed() or psa_random_deplete(). + CVE-2026-25835 +