linux-kernel - Re: random(4) driver questions

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20110628194409.GB25840@khazad-dum.debian.net>
Date:	Tue, 28 Jun 2011 16:44:09 -0300
From:	Henrique de Moraes Holschuh <hmh@....eng.br>
To:	Sandy Harris <sandyinchina@...il.com>
Cc:	LKML <linux-kernel@...r.kernel.org>
Subject: Re: random(4) driver questions

On Tue, 28 Jun 2011, Sandy Harris wrote:
> Johann Meier <recv@...tainermaster-cmp.de> wrote:
> > If you don't have a hardware rnd, you can use an entropy daemon like
> > haveged (http://www.issihosts.com/haveged/)
> 
> Yes, and there are several other alternatives. Someone suggested a

The best of which is probably to _get_ a TRNG device.

I can recommend this excellent and inexpensive (< £40) one:
http://www.entropykey.co.uk/

It will do ~32kbit/s (well, at least that's what mine is doing right now).
It is designed for Linux and also for safe use and safe distribution of
entropy.  It is a small USB device, and uses the USB cdc_acm driver to talk
to a FLOSS userspace application (MIT license).

As any USB device, it is _not_ going to be capable of providing entropy to
the kernel boot process or to very early userspace.

PS: I am in no way affiliated with Simtec electronics, I am just one of
their happy customers.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/