Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #954769

Bug#923675: debian-installer: consider using haveged to gather entropy

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Control: retitle -1 debian-installer: consider using haveged to gather entropy

Cyril Brulebois <kibi@debian.org> (2019-04-16):
> The former was on my list of things to try; thanks for mentioning the
> latter.

I'm no cryptographer so I cannot judge haveged from that angle.

But from a /proc/sys/kernel/random/entropy_avail standpoint, starting
the haveged daemon inside d-i, a couple of screens after the graphical
installer start-up, I'm getting a bump from ~150 to ~2500.

This needs to be polished before submitting the addition of haveged-udeb
and of course proper integration needs to happen, with real tests… For
wget, we're hitting #926315, but it was luckily closed a couple hours
ago; arm devices that need so much time to generate a keypair should get
a nice improvement…


My initial thought would be to launch it on demand when one is about to
get to wget calls that needs HTTPS; but we could probably benefit from
it in case HTTP is requested but redirections to HTTPS happens… There
are also the obvious keypair generations mentioned above. But then over
time maybe some other operations could be needing entropy (the
cryptsetup case is discussed in a separate thread[1]).

 1. https://lists.debian.org/debian-boot/2019/04/msg00153.html

So it might be best to start it unconditionally at start-up?


Cheers,
-- 
Cyril Brulebois (kibi@debian.org)            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#923675: Add related bug #916690 info Daniel Lange <DLange@debian.org> - 2019-04-16 09:40 +0200
  Bug#923675: Add related bug #916690 info Petter Reinholdtsen <pere@hungry.com> - 2019-04-16 12:30 +0200
    Bug#923675: Add related bug #916690 info Ben Hutchings <ben@decadent.org.uk> - 2019-04-16 13:10 +0200
      Bug#923675: Add related bug #916690 info Petter Reinholdtsen <pere@hungry.com> - 2019-04-16 14:10 +0200
        Bug#923675: Add related bug #916690 info Ben Hutchings <ben@decadent.org.uk> - 2019-04-16 21:20 +0200
          Bug#923675: Add related bug #916690 info Cyril Brulebois <kibi@debian.org> - 2019-04-16 22:40 +0200
            Bug#923675: debian-installer: consider using haveged to gather entropy Cyril Brulebois <kibi@debian.org> - 2019-04-16 23:50 +0200
              Bug#923675: debian-installer: consider using haveged to gather entropy Steve McIntyre <steve@einval.com> - 2019-04-17 00:30 +0200
              Bug#923675: debian-installer: consider using haveged to gather entropy Jonathan Carter <jonathan@jonathancarter.org> - 2019-04-17 08:30 +0200
              Bug#923675: debian-installer: consider using haveged to gather entropy Ben Hutchings <ben@decadent.org.uk> - 2019-04-17 15:10 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Cyril Brulebois <kibi@debian.org> - 2019-04-20 02:50 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Holger Levsen <holger@layer-acht.org> - 2019-04-20 10:50 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Cyril Brulebois <kibi@debian.org> - 2019-04-20 23:40 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Holger Levsen <holger@layer-acht.org> - 2019-04-22 17:10 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Cyril Brulebois <kibi@debian.org> - 2019-04-22 19:40 +0200
          Bug#923675: Add related bug #916690 info Petter Reinholdtsen <pere@hungry.com> - 2019-04-16 23:50 +0200
  Bug#923675: Add related bug #916690 info Thorsten Glaser <tg@mirbsd.de> - 2019-04-16 15:40 +0200

csiph-web