Re: entropy gathering (was Re: Why does reading from /dev/urandom deplete entropy so much?)

On Sat, Dec 08, 2007 at 03:04:32PM -0500, Jeff Garzik wrote:
Matt Mackall wrote:
On Sat, Dec 08, 2007 at 02:36:33PM -0500, Jeff Garzik wrote:
As an aside...

Speaking as the maintainer rng-tools, which is the home of the hardware
RNG entropy gathering daemon...

I wish somebody (not me) would take rngd and several other projects, and
combine them into a single actively maintained "entropy gathering"
package.

I think we should re-evaluate having an internal path from the hwrngs
to /dev/[u]random, which will reduce the need for userspace config
that can go wrong.

That's a bit of a tangent on a tangent. :) Most people don't have a
hardware RNG.

But as long as there are adequate safeguards against common hardware
failures (read: FIPS testing inside the kernel), go for it.

We can do some internal whitening and some other basic tests
(obviously not the full FIPS battery). The basic von Neumann whitening
will do a great job of shutting off the spigot when an RNG fails in a
non-nefarious way. And FIPS stuff is no defense against the nefarious
failures anyway.

But I think simply dividing our entropy estimate by 10 or so will go
an awfully long way.

--
Mathematics is the supreme nostalgia of our time.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

Relevant Pages

  • Re: /dev/random is probably not
    ... Why anyone is using the old entropy based RNG at all on modern commodity ... It is good if you know that your hardware operates in a manner which ... Via - on CPU crypto quality RNG. ...
    (Bugtraq)
  • Re: [PATCH] hw_random: add quality categories
    ... RNG because it is not a hardware random number generator at all! ... it does not deserve to be called a real HWRNG. ... I do not believe there exist devices that deserve to be classified as ...
    (Linux-Kernel)
  • Re: Arduino HWRNG
    ... cryptographic RNG seeded? ... Isn't that a valid use for a TRNG? ... Appropriately applied to a RNG a hardware TRNG provides both forward and backwards security. ... The same argument applies to the smart card RND in addition to the ...
    (sci.crypt)
  • Re: strengthening /dev/urandom
    ... ]> Real as state-compromise attacks clearly are, ... The questioon is whether in a hardware based random number generator, ... Should, or can, the out of the RNG be made independent of the ...
    (sci.crypt)
  • Re: entropy gathering (was Re: Why does reading from /dev/urandom deplete entropy so much?)
    ... which is the home of the hardware ... RNG entropy gathering daemon... ... I wish somebody would take rngd and several other projects, ... combine them into a single actively maintained "entropy gathering" package. ...
    (Linux-Kernel)
Loading