linux-kernel - Re: [Intel][RNG] PCI IDs commented out for 82801I (ICH9 Mobile and non-mobile)?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 20 Mar 2013 13:52:37 -0700
From:	"H. Peter Anvin" <hpa@...or.com>
To:	Shawn Starr <shawn.starr@...ers.com>
CC:	linux-kernel@...r.kernel.org
Subject: Re: [Intel][RNG] PCI IDs commented out for 82801I (ICH9 Mobile and
 non-mobile)?

On 03/20/2013 01:42 PM, Shawn Starr wrote:
> Hello folks,
> 
> I was looking at why I can't load the Intel RNG driver (or why it doesn't load automatically) and 
> it just so happens I have both the mobile and non-mobile ICH9 chipset. Looking at the driver I noticed:
> 
>  /* BAM, CAM, DBM, FBM, GxM
>        { PCI_DEVICE(0x8086, 0x2448) }, */
>  
>  /* BA, CA, DB, Ex, 6300, Fx, 631x/632x, Gx
>        { PCI_DEVICE(0x8086, 0x244e) }, */
> 
> IDs from both machines:
>  
> 00:1e.0 PCI bridge [0604]: Intel Corporation 82801 Mobile PCI Bridge [8086:2448] (rev 93)
> 00:1e.0 PCI bridge [0604]: Intel Corporation 82801 PCI Bridge [8086:244e] (rev 92)
>  
> I saw a thread from 2006 explaining the 50% chance there's no RNG (but these days all modern chipsets should have an RNG) and I know 
> this chipset I have does have an RNG so I'd like to use the HW random generator vs software.
> 

Do you know that for sure?

> Do we need to revisit this? Even if I try to force it to load it still fails:
> 
> # modprobe intel_rng no_fwh_detect=-1 or =1 
> modprobe: ERROR: could not insert 'intel_rng': No such device
> 

The Intel RNG of that era lived in the Firmware Hub (a.k.a. BIOS flash)
rather than in the chipset proper... so even with the right chipset you
might or might not actually have the the RNG.  The code really detects
the presence of a chipset which could support a FWH flash part.

Jan, in c24c95a085c6b52c11c2f5afecc38b0ca143cdae you comment out a
number of PCI IDs.  Was that intentional?

	-hpa

-- 
H. Peter Anvin, Intel Open Source Technology Center
I work for Intel.  I don't speak on their behalf.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/