Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-11 Thread Clemens Ladisch
Stanimir Varbanov wrote: > I ran the rngtest with following command line: > > # cat /dev/hw_random | rngtest -c 10 > ... > rngtest: bits received from input: 200032 > rngtest: FIPS 140-2 successes: 99925 > rngtest: FIPS 140-2 failures: 75 > ... > > Could you guys comment those results? The

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread H. Peter Anvin
On 10/10/2013 03:41 AM, Paul Mackerras wrote: > On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: > >> consider the PowerPC random number generator[1]) and > > [snip] > >> [1] which has a known first-order bias which they "correct" for by >> XORing two datums together in a very sim

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread Stanimir Varbanov
Hi Ted, Peter, On 10/09/2013 06:07 PM, H. Peter Anvin wrote: > On 10/09/2013 07:46 AM, Stanimir Varbanov wrote: >> >> No, there is no public documentation for the block. Here is the driver >> documentation which I used as a base [1]. >> >> My guess was that - if it is PRNG (got from hardware descr

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread Paul Mackerras
On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: > consider the PowerPC random number generator[1]) and [snip] > [1] which has a known first-order bias which they "correct" for by > XORing two datums together in a very simple data reduction step. 65 actually, not two. > However,

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread H. Peter Anvin
On 10/09/2013 09:03 AM, Theodore Ts'o wrote: > On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: >> There needs to be an architecturally guaranteed lower bound on the >> entropic content for this to be at all useful. However, the hwrandom >> interface is currently expecting fully ent

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread Theodore Ts'o
On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: > There needs to be an architecturally guaranteed lower bound on the > entropic content for this to be at all useful. However, the hwrandom > interface is currently expecting fully entropic output (which is almost > certainly bogus...

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread H. Peter Anvin
On 10/09/2013 07:46 AM, Stanimir Varbanov wrote: > > No, there is no public documentation for the block. Here is the driver > documentation which I used as a base [1]. > > My guess was that - if it is PRNG (got from hardware description link > above) than according to wiki [2] it is also known as

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread Stanimir Varbanov
Hi Ted, On 10/04/2013 09:10 PM, Theodore Ts'o wrote: > On Fri, Oct 04, 2013 at 07:23:50PM +0300, Stanimir Varbanov wrote: >> I guess that it should follow NIST 800-90 recommendation, but I'm not >> aware what DRBG mechanism is used. >> >> To be honest I really don't know the hardware implementatio