Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757209Ab3IKWIt (ORCPT ); Wed, 11 Sep 2013 18:08:49 -0400 Received: from mga03.intel.com ([143.182.124.21]:4685 "EHLO mga03.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753694Ab3IKWIr convert rfc822-to-8bit (ORCPT ); Wed, 11 Sep 2013 18:08:47 -0400 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="4.90,887,1371106800"; d="scan'208";a="359180002" From: "Johnston, DJ" To: Andy Lutomirski , David Safford CC: "H. Peter Anvin" , Leonidas Da Silva Barbosa , Ashley Lai , "Rajiv Andrade" , Marcel Selhorst , Sirrix AG , Linux Kernel Mailing List , Jeff Garzik , "Ted Ts'o" , Kent Yoder , David Safford , Mimi Zohar Subject: RE: TPMs and random numbers Thread-Topic: TPMs and random numbers Thread-Index: AQHOrxOJBGCugV8ERESrS0XX9O3pdJnBRdyA///SBBA= Date: Wed, 11 Sep 2013 22:08:45 +0000 Message-ID: References: <1378920168.26698.64.camel@localhost> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.22.254.140] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 8BIT MIME-Version: 1.0 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 848 Lines: 16 >-----Original Message----- >From: Andy Lutomirski [mailto:luto@amacapital.net] >A TPM that has an excellent internal entropy source and is FIPS 140-2 compliant with no bugs whatsoever may still use Dual_EC_DRBG, which looks increasingly likely to be actively malicious. You can look up the FIPS certification to see which algorithms were approved. The Dual_EC_DRBG always looked suspect to me, which is one reason why it wasn't used in RdRand. The other is that the core crypto function doesn't do dual duty as an entropy extractor like AES hardware does with AES-CBC-MAC and AES-CTR-DRBG. DJ -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/