Re: Question on hostapd random pool

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Jun 08, 2016 at 05:20:58PM -0700, Ann Lo wrote:
> Would you provide advice on the following messages from hostapd on
> Linux? Do they imply that there will be problems with generating AES
> keys? Does hostapd generate CCMP IV?
> 
> 1) random: Not enough entropy pool available for secure operations.
> 
> 2) WPA: Not enough entropy in random pool for secure operation -
> update keys later when the first station connects.

These are indications of the device not having sufficient amount of good
quality entropy available for generating secure random numbers. hostapd
tries to work around this by delaying certain operations related to
generating keys.

hostapd is not involved in actual CCMP processing of the Data frames,
i.e., that part is somewhere in the kernel or Wi-Fi firmware/hardware.

-- 
Jouni Malinen                                            PGP id EFC895FA

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux