Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #954858

Bug#923675: debian-installer: consider using haveged to gather entropy

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Tue, 2019-04-16 at 23:45 +0200, Cyril Brulebois wrote:
[...]
> My initial thought would be to launch it on demand when one is about to
> get to wget calls that needs HTTPS; but we could probably benefit from
> it in case HTTP is requested but redirections to HTTPS happens… There
> are also the obvious keypair generations mentioned above. But then over
> time maybe some other operations could be needing entropy (the
> cryptsetup case is discussed in a separate thread[1]).
> 
>  1. https://lists.debian.org/debian-boot/2019/04/msg00153.html
> 
> So it might be best to start it unconditionally at start-up?

Ideally it would only be used if there isn't a hardware RNG available.
Currently we don't include any hardware RNG modules in udebs, but that
can be changed.  So please first check that:

* /sys/devices/virtual/misc/hw_random/rng_current is absent or
  contains "none"
* (x86 only) /proc/cpuinfo does not mention rdrand (I can't find an
  arch-independent way to check for this, and Linux doesn't yet
  support an equivalent feature on any other architecture)

Something like this should work:

if [ "$(cat /sys/devices/virtual/misc/hw_random/rng_current 2>/dev/null || echo none)" = none ] \
   && ! grep -q '^flags\b.*\brdrand\b' /proc/cpuinfo; then
    # use software entropy daemon
fi

Ben.

-- 
Ben Hutchings
Make three consecutive correct guesses and you will be considered
an expert.

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#923675: Add related bug #916690 info Daniel Lange <DLange@debian.org> - 2019-04-16 09:40 +0200
  Bug#923675: Add related bug #916690 info Petter Reinholdtsen <pere@hungry.com> - 2019-04-16 12:30 +0200
    Bug#923675: Add related bug #916690 info Ben Hutchings <ben@decadent.org.uk> - 2019-04-16 13:10 +0200
      Bug#923675: Add related bug #916690 info Petter Reinholdtsen <pere@hungry.com> - 2019-04-16 14:10 +0200
        Bug#923675: Add related bug #916690 info Ben Hutchings <ben@decadent.org.uk> - 2019-04-16 21:20 +0200
          Bug#923675: Add related bug #916690 info Cyril Brulebois <kibi@debian.org> - 2019-04-16 22:40 +0200
            Bug#923675: debian-installer: consider using haveged to gather entropy Cyril Brulebois <kibi@debian.org> - 2019-04-16 23:50 +0200
              Bug#923675: debian-installer: consider using haveged to gather entropy Steve McIntyre <steve@einval.com> - 2019-04-17 00:30 +0200
              Bug#923675: debian-installer: consider using haveged to gather entropy Jonathan Carter <jonathan@jonathancarter.org> - 2019-04-17 08:30 +0200
              Bug#923675: debian-installer: consider using haveged to gather entropy Ben Hutchings <ben@decadent.org.uk> - 2019-04-17 15:10 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Cyril Brulebois <kibi@debian.org> - 2019-04-20 02:50 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Holger Levsen <holger@layer-acht.org> - 2019-04-20 10:50 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Cyril Brulebois <kibi@debian.org> - 2019-04-20 23:40 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Holger Levsen <holger@layer-acht.org> - 2019-04-22 17:10 +0200
                Bug#923675: debian-installer: consider using haveged to gather entropy Cyril Brulebois <kibi@debian.org> - 2019-04-22 19:40 +0200
          Bug#923675: Add related bug #916690 info Petter Reinholdtsen <pere@hungry.com> - 2019-04-16 23:50 +0200
  Bug#923675: Add related bug #916690 info Thorsten Glaser <tg@mirbsd.de> - 2019-04-16 15:40 +0200

csiph-web