linux-kernel - Re: [RFC] AES instead of SHA1 for /dev/urandom

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 12 Dec 2012 20:10:16 +1100
From:	NeilBrown <neilb@...e.de>
To:	Ondřej Bílka <neleai@...nam.cz>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: [RFC] AES instead of SHA1 for /dev/urandom

On Wed, 12 Dec 2012 09:58:16 +0100 Ondřej Bílka <neleai@...nam.cz> wrote:

> On Wed, Dec 12, 2012 at 01:08:26PM +1100, NeilBrown wrote:
> > On Wed, 12 Dec 2012 03:03:54 +0100 Ondřej Bílka <neleai@...nam.cz> wrote:
> > 
> > > I consider to speed-up /dev/urandom on recent intel processors by
> > > using hardware aes. Same for accelerated aes crypto.
> > > 
> > > Would you accept a patch if I wrote it?
> > 
> > Have you read  https://lwn.net/Articles/525459  ?
> > 
> Yes
> > In particular the paragraph containing:
> > 
> >    A member of the audience asked why the kernel couldn't just do away with
> >    the existing system and use the HWRNG directly.
> > 
> > Does that answer your question in any way?
> > 
> No as AES is a HWRNG about as much as horse is type of automobile.

Yes, of course.  Thanks.

NeilBrown

Download attachment "signature.asc" of type "application/pgp-signature" (829 bytes)