Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-11 Thread Clemens Ladisch
Stanimir Varbanov wrote: > I ran the rngtest with following command line: > > # cat /dev/hw_random | rngtest -c 10 > ... > rngtest: bits received from input: 200032 > rngtest: FIPS 140-2 successes: 99925 > rngtest: FIPS 140-2 failures: 75 > ... > > Could you guys comment those results?

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-11 Thread Clemens Ladisch
Stanimir Varbanov wrote: I ran the rngtest with following command line: # cat /dev/hw_random | rngtest -c 10 ... rngtest: bits received from input: 200032 rngtest: FIPS 140-2 successes: 99925 rngtest: FIPS 140-2 failures: 75 ... Could you guys comment those results? These tests

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread H. Peter Anvin
On 10/10/2013 03:41 AM, Paul Mackerras wrote: > On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: > >> consider the PowerPC random number generator[1]) and > > [snip] > >> [1] which has a known first-order bias which they "correct" for by >> XORing two datums together in a very

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread Stanimir Varbanov
Hi Ted, Peter, On 10/09/2013 06:07 PM, H. Peter Anvin wrote: > On 10/09/2013 07:46 AM, Stanimir Varbanov wrote: >> >> No, there is no public documentation for the block. Here is the driver >> documentation which I used as a base [1]. >> >> My guess was that - if it is PRNG (got from hardware

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread Paul Mackerras
On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: > consider the PowerPC random number generator[1]) and [snip] > [1] which has a known first-order bias which they "correct" for by > XORing two datums together in a very simple data reduction step. 65 actually, not two. >

Re: rngd (was: [PATCH 0/2] Add support for Qualcomm's PRNG)

2013-10-10 Thread Clemens Ladisch
H. Peter Anvin wrote: > On 10/09/2013 09:03 AM, Theodore Ts'o wrote: >> You can specify as a command-line argument (-H) to rngd the entropy >> per bit of input data. > > There is no -H option in upstream rngd. It might be in the Debian fork, > but the Debian fork has serious other problems. What

Re: rngd (was: [PATCH 0/2] Add support for Qualcomm's PRNG)

2013-10-10 Thread Clemens Ladisch
H. Peter Anvin wrote: On 10/09/2013 09:03 AM, Theodore Ts'o wrote: You can specify as a command-line argument (-H) to rngd the entropy per bit of input data. There is no -H option in upstream rngd. It might be in the Debian fork, but the Debian fork has serious other problems. What

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread Paul Mackerras
On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: consider the PowerPC random number generator[1]) and [snip] [1] which has a known first-order bias which they correct for by XORing two datums together in a very simple data reduction step. 65 actually, not two. However, if

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread Stanimir Varbanov
Hi Ted, Peter, On 10/09/2013 06:07 PM, H. Peter Anvin wrote: On 10/09/2013 07:46 AM, Stanimir Varbanov wrote: No, there is no public documentation for the block. Here is the driver documentation which I used as a base [1]. My guess was that - if it is PRNG (got from hardware description

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-10 Thread H. Peter Anvin
On 10/10/2013 03:41 AM, Paul Mackerras wrote: On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: consider the PowerPC random number generator[1]) and [snip] [1] which has a known first-order bias which they correct for by XORing two datums together in a very simple data

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread H. Peter Anvin
On 10/09/2013 09:03 AM, Theodore Ts'o wrote: > On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: >> There needs to be an architecturally guaranteed lower bound on the >> entropic content for this to be at all useful. However, the hwrandom >> interface is currently expecting fully

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread Theodore Ts'o
On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: > There needs to be an architecturally guaranteed lower bound on the > entropic content for this to be at all useful. However, the hwrandom > interface is currently expecting fully entropic output (which is almost > certainly

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread H. Peter Anvin
On 10/09/2013 07:46 AM, Stanimir Varbanov wrote: > > No, there is no public documentation for the block. Here is the driver > documentation which I used as a base [1]. > > My guess was that - if it is PRNG (got from hardware description link > above) than according to wiki [2] it is also known

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread Stanimir Varbanov
Hi Ted, On 10/04/2013 09:10 PM, Theodore Ts'o wrote: > On Fri, Oct 04, 2013 at 07:23:50PM +0300, Stanimir Varbanov wrote: >> I guess that it should follow NIST 800-90 recommendation, but I'm not >> aware what DRBG mechanism is used. >> >> To be honest I really don't know the hardware

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread Stanimir Varbanov
Hi Ted, On 10/04/2013 09:10 PM, Theodore Ts'o wrote: On Fri, Oct 04, 2013 at 07:23:50PM +0300, Stanimir Varbanov wrote: I guess that it should follow NIST 800-90 recommendation, but I'm not aware what DRBG mechanism is used. To be honest I really don't know the hardware implementation

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread H. Peter Anvin
On 10/09/2013 07:46 AM, Stanimir Varbanov wrote: No, there is no public documentation for the block. Here is the driver documentation which I used as a base [1]. My guess was that - if it is PRNG (got from hardware description link above) than according to wiki [2] it is also known as a

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread Theodore Ts'o
On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: There needs to be an architecturally guaranteed lower bound on the entropic content for this to be at all useful. However, the hwrandom interface is currently expecting fully entropic output (which is almost certainly bogus...

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-09 Thread H. Peter Anvin
On 10/09/2013 09:03 AM, Theodore Ts'o wrote: On Wed, Oct 09, 2013 at 08:07:35AM -0700, H. Peter Anvin wrote: There needs to be an architecturally guaranteed lower bound on the entropic content for this to be at all useful. However, the hwrandom interface is currently expecting fully entropic

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-04 Thread Theodore Ts'o
On Fri, Oct 04, 2013 at 07:23:50PM +0300, Stanimir Varbanov wrote: > I guess that it should follow NIST 800-90 recommendation, but I'm not > aware what DRBG mechanism is used. > > To be honest I really don't know the hardware implementation details. I > put PRNG abbreviation in the cover letter

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-04 Thread Stanimir Varbanov
Hi Ted, On 10/03/2013 07:51 PM, Theodore Ts'o wrote: > On Thu, Oct 03, 2013 at 05:52:33PM +0300, Stanimir Varbanov wrote: >> This patch set adds hardware RNG driver wich is used to control the >> Qualcomm's PRNG hardware block. >> The first patch document the DT bindings needed to sucessfuly

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-04 Thread Stanimir Varbanov
Hi Ted, On 10/03/2013 07:51 PM, Theodore Ts'o wrote: On Thu, Oct 03, 2013 at 05:52:33PM +0300, Stanimir Varbanov wrote: This patch set adds hardware RNG driver wich is used to control the Qualcomm's PRNG hardware block. The first patch document the DT bindings needed to sucessfuly probe the

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-04 Thread Theodore Ts'o
On Fri, Oct 04, 2013 at 07:23:50PM +0300, Stanimir Varbanov wrote: I guess that it should follow NIST 800-90 recommendation, but I'm not aware what DRBG mechanism is used. To be honest I really don't know the hardware implementation details. I put PRNG abbreviation in the cover letter just

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-03 Thread Theodore Ts'o
On Thu, Oct 03, 2013 at 05:52:33PM +0300, Stanimir Varbanov wrote: > This patch set adds hardware RNG driver wich is used to control the > Qualcomm's PRNG hardware block. > The first patch document the DT bindings needed to sucessfuly probe > the driver and the second patch adds the driver. Is

[PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-03 Thread Stanimir Varbanov
This patch set adds hardware RNG driver wich is used to control the Qualcomm's PRNG hardware block. The first patch document the DT bindings needed to sucessfuly probe the driver and the second patch adds the driver. Comments are welecome! Stanimir Varbanov (2): ARM: DT: msm: Add Qualcomm's

[PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-03 Thread Stanimir Varbanov
This patch set adds hardware RNG driver wich is used to control the Qualcomm's PRNG hardware block. The first patch document the DT bindings needed to sucessfuly probe the driver and the second patch adds the driver. Comments are welecome! Stanimir Varbanov (2): ARM: DT: msm: Add Qualcomm's

Re: [PATCH 0/2] Add support for Qualcomm's PRNG

2013-10-03 Thread Theodore Ts'o
On Thu, Oct 03, 2013 at 05:52:33PM +0300, Stanimir Varbanov wrote: This patch set adds hardware RNG driver wich is used to control the Qualcomm's PRNG hardware block. The first patch document the DT bindings needed to sucessfuly probe the driver and the second patch adds the driver. Is this