Received: by 2002:ac0:a594:0:0:0:0:0 with SMTP id m20-v6csp3739712imm; Thu, 17 May 2018 13:57:54 -0700 (PDT) X-Google-Smtp-Source: AB8JxZpwnuScQaEpFkRmyf5ACqrFbE0esLM1RndE4otz1PlIP+UON/F0DIE6xsGx+Txwbgzh0FI4 X-Received: by 2002:a62:bd2:: with SMTP id 79-v6mr6539159pfl.4.1526590674582; Thu, 17 May 2018 13:57:54 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1526590674; cv=none; d=google.com; s=arc-20160816; b=CouwWB0U0JkqS5o4l0iHZVUUV4Ni7ozoxag5WiwljzTrDDWgE/Wm3PMnChBUHBsZtI hgA53f/LRd2AF/nj76SUPMW5do/DI7Za+OFK3wJ1DhHcO+h2ZcwXtMyZHjuoS2TPbQv1 heVY1rdz2tQDJWKIv6sDplQAky+sR8KN//KwcidHZnjlM5zGqkcpEG+feF29Z0ndL+n6 DleOnHD7kTfr89TWwu29theMxPSqN1nwMvjMasU0hqgmqRSneJKVar1HKAO/imSN85ln 82qT+efpeJcGRiBw/dYwc+NogEin0t19Htrz7x4IjUCiunPXEUu9H2BeRbRiYg8Curm7 8qDA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:mail-followup-to :message-id:subject:cc:to:from:date:dkim-signature :arc-authentication-results; bh=G7nnIAwJl9AXbu8e0I5lhGAtLDJxbFdAV1O522Xi5so=; b=PjVCfJh69mj42G0CaAp5Vj5Fz80N/+iwbNmzcCdv1GbJelzc4wcY7WRrEQngXDUAkC b9Nhl/vlfrdsn2smCR4y8otPINJIQAxfzUJifUN2yNAF7lJTngNyIkos1z06E8MIqphh IzWBnZtgWRxK2a/FK03pX+3+acikGRuXgtL9FsPYjatIsi8tB1osRwoY4UnU5CBS6nmT quJaHaPMi/JZ6Zm9ZhFmlJN+E2hUSWHvgYQFJLm2SxP3vBm5sfUyHIXQGO+ojKymD95E DwsLxRgchT0s1XUd7HSMVLlAo9ozHnIbvkyIwG8/k8O3KhC2crUk08B9BR8MDSgYFCI9 YcOQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=fail header.i=@thunk.org header.s=ef5046eb header.b=anCScOns; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id t21-v6si4615598pgv.639.2018.05.17.13.57.39; Thu, 17 May 2018 13:57:54 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=fail header.i=@thunk.org header.s=ef5046eb header.b=anCScOns; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752457AbeEQU5B (ORCPT + 99 others); Thu, 17 May 2018 16:57:01 -0400 Received: from imap.thunk.org ([74.207.234.97]:46502 "EHLO imap.thunk.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752177AbeEQU47 (ORCPT ); Thu, 17 May 2018 16:56:59 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=thunk.org; s=ef5046eb; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Subject:Cc:To:From:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=G7nnIAwJl9AXbu8e0I5lhGAtLDJxbFdAV1O522Xi5so=; b=anCScOnsbktt2U+ljK7nrHalmo CaRpvt25iKNKs/F/oSEcnsfwAPxqUY/QgyDeBMHvAplVElIb+GhiVg+8GUn9oETzmX3GTE34ITTlC 0nO3D0ON/1BCMVCd5OdKjrcWvFV55ZPZPMQM8S/Mui6dNQX90qtMlDUodSaygwXystzM=; Received: from root (helo=callcc.thunk.org) by imap.thunk.org with local-esmtp (Exim 4.89) (envelope-from ) id 1fJPxH-0000b7-Te; Thu, 17 May 2018 20:56:55 +0000 Received: by callcc.thunk.org (Postfix, from userid 15806) id 17FA87A5990; Thu, 17 May 2018 16:56:55 -0400 (EDT) Date: Thu, 17 May 2018 16:56:55 -0400 From: "Theodore Y. Ts'o" To: Christophe LEROY Cc: Stephan Mueller , linux-crypto@vger.kernel.org, Linux Kernel Developers List Subject: Re: [PATCH 1/5] random: fix crng_ready() test Message-ID: <20180517205655.GC15263@thunk.org> Mail-Followup-To: "Theodore Y. Ts'o" , Christophe LEROY , Stephan Mueller , linux-crypto@vger.kernel.org, Linux Kernel Developers List References: <20180413013046.404-1-tytso@mit.edu> <1699469.KmO53oa8XU@tauon.chronox.de> <20180413125313.GA2633@thunk.org> <4393662.RPWnPK42dp@tauon.chronox.de> <20180413170037.GA28721@thunk.org> <84e0c16c-2b48-69e5-4ca4-2ca3bce15dc9@c-s.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <84e0c16c-2b48-69e5-4ca4-2ca3bce15dc9@c-s.fr> User-Agent: Mutt/1.9.5 (2018-04-13) X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: tytso@thunk.org X-SA-Exim-Scanned: No (on imap.thunk.org); SAEximRunCond expanded to false Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, May 17, 2018 at 08:01:04AM +0200, Christophe LEROY wrote: > > On a powerpc embedded board which has an mpc8xx processor running at 133Mhz, > I now get the startup done in more than 7 minutes instead of 30 seconds. > This is due to the webserver blocking on read on /dev/random until we get > 'random: crng init done': > > [ 0.000000] Linux version 4.17.0-rc4-00415-gd2f75d40072d (root@localhost) > (gcc version 5.4.0 (GCC)) #203 PREEMPT Wed May 16 16:32:02 CEST 2018 > [ 0.295453] random: get_random_u32 called from > bucket_table_alloc+0x84/0x1bc with crng_init=0 > [ 1.030472] device: 'random': device_add > [ 1.031279] device: 'urandom': device_add > [ 1.420069] device: 'hw_random': device_add > [ 2.156853] random: fast init done > [ 462.007776] random: crng init done > > This has become really critical, is there anything that can be done ? Figure out why the webserver needs to read /dev/random and is it for a security critical purpose? A kernel patch which makes the kernel do a "lalalalala I'm secure" when it really isn't secure is a simple "solution", but would it really make you happy? - Ted