Re: [PATCH] random: add random_initialized command line param

2015-06-24 Thread Pavel Machek
On Tue 2015-06-23 23:47:33, Stephan Mueller wrote: > Am Dienstag, 23. Juni 2015, 22:44:11 schrieb Pavel Machek: > > Hi Pavel, > > > On Mon 2015-05-18 18:25:25, Stephan Mueller wrote: > > > Make the threshold at which the output entropy pools are considered to > > > be initialized configurable via

Re: [PATCH] random: add random_initialized command line param

2015-06-23 Thread Stephan Mueller
Am Dienstag, 23. Juni 2015, 22:44:11 schrieb Pavel Machek: Hi Pavel, > On Mon 2015-05-18 18:25:25, Stephan Mueller wrote: > > Make the threshold at which the output entropy pools are considered to > > be initialized configurable via a kernel command line option. The > > current integer value of 1

Re: [PATCH] random: add random_initialized command line param

2015-06-23 Thread Pavel Machek
On Mon 2015-05-18 18:25:25, Stephan Mueller wrote: > Make the threshold at which the output entropy pools are considered to > be initialized configurable via a kernel command line option. The > current integer value of 128 bits is a good default value. However, some > user groups may want to use di

Re: [PATCH] random: add random_initialized command line param

2015-05-20 Thread Stephan Mueller
Am Mittwoch, 20. Mai 2015, 11:06:42 schrieb Theodore Ts'o: Hi Theodore, As a side note to this discussion, may I ask why entropy_total is used for checking against the threshold value and not entropy_count? The reason for my question is the following: until a DRNG (in the worst case, nonblocki

Re: [PATCH] random: add random_initialized command line param

2015-05-20 Thread Theodore Ts'o
On Wed, May 20, 2015 at 08:29:19AM +0200, Stephan Mueller wrote: > > But I see that such a change may not be warranted at this > point. Though, I see that discussion may rise again in the future > when such new requirements for 256 bit keys (not only AES, thanks > Sandy for mentioning :-) ) are co

Re: [PATCH] random: add random_initialized command line param

2015-05-19 Thread Stephan Mueller
Am Dienstag, 19. Mai 2015, 18:40:20 schrieb Sandy Harris: Hi Sandy, > >When we do do it, I see no reason to support anything other than 128 >and 256, and I am not sure about retaining 128. Nor do I see any >reason this should be a command-line option rather than just a >compile-time constant. I w

Re: [PATCH] random: add random_initialized command line param

2015-05-19 Thread Sandy Harris
On Mon, May 18, 2015 at 6:58 PM, Herbert Xu wrote: > Stephan Mueller wrote: >> >> I hear more and more discussions about recommendations to use AES 256 and not >> AES 128. Or perhaps other ciphers with 256-bit keys. Salsa, ChaCha and several of the Caesar candidates support those. >> These kin

Re: [PATCH] random: add random_initialized command line param

2015-05-18 Thread Herbert Xu
Stephan Mueller wrote: > > I hear more and more discussions about recommendations to use AES 256 and not > AES 128. > > These kind of recommendations will eventually also affect the entropy > requirements for noise sources. This is my motivation for the patch: allowing > different user groups

Re: [PATCH] random: add random_initialized command line param

2015-05-18 Thread Stephan Mueller
Am Montag, 18. Mai 2015, 14:42:09 schrieb Theodore Ts'o: Hi Theodore, >On Mon, May 18, 2015 at 06:25:25PM +0200, Stephan Mueller wrote: >> Make the threshold at which the output entropy pools are considered to >> be initialized configurable via a kernel command line option. The >> current integer

Re: [PATCH] random: add random_initialized command line param

2015-05-18 Thread Theodore Ts'o
On Mon, May 18, 2015 at 06:25:25PM +0200, Stephan Mueller wrote: > Make the threshold at which the output entropy pools are considered to > be initialized configurable via a kernel command line option. The > current integer value of 128 bits is a good default value. However, some > user groups may

[PATCH] random: add random_initialized command line param

2015-05-18 Thread Stephan Mueller
Make the threshold at which the output entropy pools are considered to be initialized configurable via a kernel command line option. The current integer value of 128 bits is a good default value. However, some user groups may want to use different values. For example, the SOGIS group now requires 1