Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Sasha Levin
On Wed, 2011-09-07 at 17:43 -0400, Steve Grubb wrote: > On Wednesday, September 07, 2011 05:35:18 PM Jarod Wilson wrote: > > Another proposal that has been kicked around: a 3rd random chardev, > > which implements this functionality, leaving urandom unscathed. Some > > udev magic or a driver para

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Christoph Hellwig
On Wed, Sep 07, 2011 at 04:02:24PM -0400, Steve Grubb wrote: > The only time this kicks in is when a system is under attack. If you have set > this and > the system is running as normal, you will never notice it even there. So your userspace will break exactly when you least need it and can't de

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Christoph Hellwig
On Wed, Sep 07, 2011 at 05:18:58PM -0400, Ted Ts'o wrote: > If this is the basis for the patch, then we should definitely NACK it. > It sounds like snake oil fear mongering. You're around long enough to know that Steve and his gang do nothing but selling snake oil. -- To unsubscribe from this list

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Christoph Hellwig
On Wed, Sep 07, 2011 at 11:27:12PM +0200, Stephan Mueller wrote: > And exactly that is the concern from organizations like BSI. Their > cryptographer's concern is that due to the volume of data that you can > extract from /dev/urandom, you may find cycles or patterns that increase > the probability

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Steve Grubb
On Thursday, September 08, 2011 04:44:20 AM Christoph Hellwig wrote: > On Wed, Sep 07, 2011 at 11:27:12PM +0200, Stephan Mueller wrote: > > And exactly that is the concern from organizations like BSI. Their > > cryptographer's concern is that due to the volume of data that you can > > extract from

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Neil Horman
On Thu, Sep 08, 2011 at 08:41:57AM +0200, Tomas Mraz wrote: > On Wed, 2011-09-07 at 19:57 -0400, Neil Horman wrote: > > On Wed, Sep 07, 2011 at 04:56:49PM -0400, Steve Grubb wrote: > > > On Wednesday, September 07, 2011 04:37:57 PM Sasha Levin wrote: > > > > Anyway, it won't happen fast enough to

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Steve Grubb
On Thursday, September 08, 2011 08:52:34 AM Neil Horman wrote: > > to disk device - of course only if the device adds entropy into the > > primary pool when there are writes on the device. > > Yes, and thats a problem. We're assuming in the above case that writes to > disk generate interrupts whi

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Neil Horman
On Thu, Sep 08, 2011 at 09:11:12AM -0400, Steve Grubb wrote: > On Thursday, September 08, 2011 08:52:34 AM Neil Horman wrote: > > > to disk device - of course only if the device adds entropy into the > > > primary pool when there are writes on the device. > > > > Yes, and thats a problem. We're a

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread David Miller
From: Steve Grubb Date: Thu, 8 Sep 2011 07:48:27 -0400 > On Thursday, September 08, 2011 04:44:20 AM Christoph Hellwig wrote: >> On Wed, Sep 07, 2011 at 11:27:12PM +0200, Stephan Mueller wrote: >> > And exactly that is the concern from organizations like BSI. Their >> > cryptographer's concern is

Re: [PATCH] random: add blocking facility to urandom

2011-09-08 Thread Sandy Harris
On Thu, Sep 8, 2011 at 9:11 PM, Steve Grubb wrote: > The system being low on entropy is another problem that should be addressed. > For our > purposes, we cannot say take it from TPM or RDRND or any plugin board. We > have to have > the mathematical analysis that goes with it, we need to know w