Re: [PATCH v4 0/5] /dev/random - a new approach

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2016-06-18 12:31, Stephan Mueller wrote:
Am Samstag, 18. Juni 2016, 10:44:08 schrieb Theodore Ts'o:

Hi Theodore,


At the end of the day, with these devices you really badly need a
hardware RNG.  We can't generate randomness out of thin air.  The only
thing you really can do requires user space help, which is to generate
keys lazily, or as late as possible, so you can gather as much entropy
as you can --- and to feed in measurements from the WiFi (RSSI
measurements, MAC addresses seen, etc.)  This won't help much if you
have an FBI van parked outside your house trying to carry out a
TEMPEST attack, but hopefully it provides some protection against a
remote attacker who isn't try to carry out an on-premises attack.

All my measurements on such small systems like MIPS or smaller/older ARMs do
not seem to support that statement :-)
Was this on real hardware, or in a virtual machine/emulator? Because if it's not on real hardware, you're harvesting entropy from the host system, not the emulated one. While I haven't done this with MIPS or ARM systems, I've taken similar measurements on SPARC64, x86_64, and PPC64 systems comparing real hardware and emulated hardware, and the emulated hardware _always_ has higher entropy, even when running the emulator on an identical CPU to the one being emulated and using KVM acceleration and passing through all the devices possible.

Even if you were testing on real hardware, I'm still rather dubious, as every single test I've ever done on any hardware (SPARC, PPC, x86, ARM, and even PA-RISC) indicates that you can't harvest entropy as effectively from a smaller CPU compared to a large one, and this effect is significantly more pronounced on RISC systems.
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Kernel]     [Gnu Classpath]     [Gnu Crypto]     [DM Crypt]     [Netfilter]     [Bugtraq]

  Powered by Linux