Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757139AbaBFWWA (ORCPT ); Thu, 6 Feb 2014 17:22:00 -0500 Received: from mail-qc0-f171.google.com ([209.85.216.171]:60437 "EHLO mail-qc0-f171.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756199AbaBFWV6 convert rfc822-to-8bit (ORCPT ); Thu, 6 Feb 2014 17:21:58 -0500 MIME-Version: 1.0 In-Reply-To: <20140206222002.GC23300@outflux.net> References: <20140202203617.GA9499@logfs.org> <20140206222002.GC23300@outflux.net> Date: Thu, 6 Feb 2014 17:21:51 -0500 Message-ID: Subject: Re: [PATCH,RFC] random: collect cpu randomness From: Dave Taht To: Kees Cook Cc: =?ISO-8859-1?Q?J=F6rn_Engel?= , "Theodore Ts'o" , "H. Peter Anvin" , Linux Kernel Developers List , "Maciej W. Rozycki" , Ralf Baechle , John Crispin , Andrew McGregor , Stephan Mueller , geert@linux-m68k.org, tg@mirbsd.de Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8BIT Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Feb 6, 2014 at 5:20 PM, Kees Cook wrote: > Hi J?rn, > > On Sun, Feb 02, 2014 at 03:36:17PM -0500, J?rn Engel wrote: >> Collects entropy from random behaviour all modern cpus exhibit. The >> scheduler and slab allocator are instrumented for this purpose. How >> much randomness can be gathered is clearly hardware-dependent and hard >> to estimate. Therefore the entropy estimate is zero, but random bits >> still get mixed into the pools. > > Have you seen this work from PaX Team? > > http://grsecurity.net/pipermail/grsecurity/2012-July/001093.html > > See http://grsecurity.net/test/grsecurity-3.0-3.13.1-201402052349.patch > and search for PAX_LATENT_ENTROPY. The hardware rng world just got easier with the "hashlet". https://plus.google.com/u/0/107942175615993706558/posts/4iq6W524SxL Kernel driver wanted... > -Kees > > -- > Kees Cook @outflux.net -- Dave T?ht Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscribe.html -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/