Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 2 Jun 2017 20:20:26 -0400
From: Sandy Harris <>
To: "Jason A. Donenfeld" <>
Cc: "Theodore Ts'o" <>, Stephan Mueller <>, 
	Linux Crypto Mailing List <>, LKML <>,
Subject: Re: Re: get_random_bytes returns bad randomness
 before seeding is complete

The only sensible & general solution for the initialisation problem
that I have seen is John Denker's.

If I read that right, it would require only minor kernel changes &
none to the API Ted & others are worrying about. It would be secure
except against an enemy who can read your kernel image or interfere
with your install process. Assuming permissions are set sensibly, that
means an enemy who already has root & such an enemy has lots of much
easier ways to break things, so we need not worry about that case.

The difficulty is that it would require significant changes to
installation scripts. Still, since it is a general solution to a real
problem, it might be better to implement that rather than work on the
other suggestions in the thread.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.