Re: [PATCH v4] binfmt_elf.c: use get_random_int() to fix entropy depleting
From: Stephan Mueller
Date: Thu Nov 07 2013 - 00:22:23 EST
Am Donnerstag, 7. November 2013, 12:14:17 schrieb Jeff Liu:
>As per your previous comments for this fix, you have promised another
>approach which is promising to avoid entropy starvation, I got this
>info from the following thread: [PATCH] avoid entropy starvation due
>to stack protection
There are several solutions:
- Ted is trying to prevent a constant reseeding of the nonblocking_pool
from the input_pool with a set of patches. I am unsure whether these
patches find their way into the kernel. With those patches, we can
happily keep get_random_bytes without too much strain on the input_pool
entropy -- i.e. drop the conversion to get_random_int.
- The begin of the email thread contains a patch that adds a new pool
which I called the kernel_pool that is just just for kernel internal
purposes. With Teds proposed changes to nonblocking_pool,
nonblocking_pool would behave almost like my kernel_pool and thus my
kernel_pool patch would not be needed.
- Lastly I am trying to add a new seed source to random.c and kernel
crypto API which could also be used as a stand-alone noise source. That
proposed noise source would effectively alleviate a lot of entropy
problems. The discussion for inclusion is raging at
http://lkml.org/lkml/2013/10/11/582. Ted is having concerns and we are
in a discussion to address those.
>My current fix has been merged into Andrew's tree(marked in "stuck"
>state) for a long time, and it also works well in our internal
>specific kernel, I'd like to know if there is any update from you, so
>that we can move it along for mainline. :)
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/