Messages in this thread | | | From | David Brownell <> | Subject | Re: [PATCH 8/14] random: Remove SA_SAMPLE_RANDOM from USB gadget drivers | Date | Sat, 6 May 2006 11:16:16 -0700 |
| |
On Saturday 06 May 2006 4:07 am, Denis Vlasenko wrote: > On Friday 05 May 2006 19:42, Matt Mackall wrote: > > Remove SA_SAMPLE_RANDOM from USB gadget drivers
It's conventional to post USB patches to linux-usb-devel, or at least to CC that list.
> > There's no a priori reason to think that USB device interrupts will > > contain "entropy" as defined/required by /dev/random. In fact, most > > operations will be streaming and bandwidth- or CPU-limited. > > /dev/random needs unpredictable inputs such as human interaction or > > chaotic physical processes like turbulence manifested in disk seek > > times.
And that'd be why you removed that SAMPLE_RANDOM from the Lubbock VBUS irqs ... which come from users connecting (by hand!) a USB cable. :)
You shouldn't add spaces before labels, or change indents from pure-tab to tabs-plus-four-spaces.
Admittedly OMAP _now_ has access to the FIPS-certified hardware RNG, so for that platform it's hard to justify needing other entropy sources. But on the other hand, DMA completion IRQs aren't exactly predictable either, and it doesn't necessarily hurt to salt a high entropy pool with some less-high entropy inputs.
> Come on, let's get real. A few low bits of TSC are random enough > (for just about any interrupt source). > > Attackers will probably look for easier ways to hack your crypto > than predicting /dev/random.
I'm not sure I'd go that far. But I'd agree that this particular patch should not be merged.
Reasonable people could have arguments about the quality of a given entropy source ... and the SA_SAMPLE_RANDOM mechanism has no way to indicate that quality, thereby wrongly implying that all interrupts have the same entropy contribution. A few Kbytes/second is very different from a few bits per hour.
But I disagree with the blanket assertion that only high quality crypto-ready RNG sources should ever be provided ... and that lower quality sources are useless. Sure it helps if attackers need extra hours to make the attack, but extra minutes help too.
- Dave
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |