Re: [PATCH] API for true Random Number Generators to add entropy(2.6.11)

From: Jeff Garzik
Date: Thu Mar 24 2005 - 16:04:45 EST


Jean-Luc Cooke wrote:
On Thu, Mar 24, 2005 at 07:48:18AM -0500, Jeff Garzik wrote:

If you want to add entropy to the kernel entropy pool from hardware RNG, you should use the userland daemon, which detects non-random (broken) hardware and provides throttling, so that RNG data collection does not consume 100% CPU.

If you want to use the hardware RNG directly, it's simple: just open /dev/hw_random.

Hardware RNG should not go kernel->kernel without adding FIPS tests and such.


If your RNG were properly written, it shouldn't matter if the data you're
pumping into /dev/random passed muster or not. If you're tracking entropy
count, then that's a different story of course.

It's rather lame to add data, without also crediting entropy.

Further, it wastes many CPU cycles in many places, if you are doing nothing but pumping bad data (all 1's, for example) into /dev/random.


I've been commissioned to write Fortuna RNG for Linux and weddings, houses and
cars not withstanding, I should I it ready soon to be given to LKML for
digestion.

Sounds great.

Jeff


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/