Re: Feeding /dev/random with /dev/urandom

From: Bill Unruh (unruh_at_string.physics.ubc.ca)
Date: 04/28/04


Date: Wed, 28 Apr 2004 21:17:46 +0000 (UTC)

ermscag@tin.it (erm67) writes:

]The latest linux kernel features a blocking /dev/random device, that
]is it will block when the available entropy is not sufficient. I found
]that some motherboards has a hw randomness generator and that it can
]be used, with rngd from http://sourceforge.net/projects/gkernel/ to
]feed /dev/random so that its entropy pools are always ready.
]My motherboard doesn't have this device and besides is very slow thus
]/dev/random often blocks.
]The 'solution' I found is to instruct rngd to read from /dev/urandom
](non blocking) and to feed /dev/random.
]Of course this seems quite silly even to me :-) but now
]/proc/sys/kernel/random/entropy_avail always reports that entropy is
]available and all apps reading /dev/random no longer blocks.
]The question the random number from /dev/random are still 'good' is
]using this method?

No.
/dev/urandom does not block by feeding your "random" data which is not
really random.



Relevant Pages

  • Feeding /dev/random with /dev/urandom
    ... The latest linux kernel features a blocking /dev/random device, ... is it will block when the available entropy is not sufficient. ... that some motherboards has a hw randomness generator and that it can ... The 'solution' I found is to instruct rngd to read from /dev/urandom ...
    (comp.security.unix)
  • Re: strengthening /dev/urandom
    ... >>that your non blocking proposal is very, ... When an attacker can drain entropy from the RNG at ... For example, Fortuna acts like a CPRNG between reseeds, and its entropy is the ...
    (sci.crypt)
  • Re: new /dev/random
    ... >> There is no blocking device in Linux, ... >> even after it already has enough entropy to provide security. ... In Linux, ... system events, which can take an extremely long time. ...
    (sci.crypt)
  • Re: Feeding /dev/random with /dev/urandom
    ... ermscag@tin.it (erm67) said: ... >is it will block when the available entropy is not sufficient. ... >that some motherboards has a hw randomness generator and that it can ...
    (comp.security.unix)
  • Re: strengthening /dev/urandom
    ... >Blocking is just an ARTIFICIAL LIMITATION imposed because some half-wit ... >thought he could estimate entropy. ... I can't tell you how many bits of entropy are in the physical inputs to ...
    (sci.crypt)