All of lore.kernel.org
 help / color / mirror / Atom feed
From: Alexander Dahl <ada@thorsis.com>
To: linux-crypto@vger.kernel.org
Cc: "Stephan Müller" <smueller@chronox.de>
Subject: jitterentropy_rng on armv5 embedded target
Date: Fri, 08 May 2020 13:40:08 +0200	[thread overview]
Message-ID: <2567555.LKkejuagh6@ada> (raw)

Hello,

after upgrading OpenSSL to 1.1.1g on an armv5 based embedded target I had a 
deeper look into entropy generation for that device and stumbled over the in 
kernel 'jitterentropy_rng' module.

As far as I understood it's supposed to do the same as the well known 
'haveged' or the userspace daemon 'jitterentropy-rngd' by Stephan Müller [1], 
right? (Although those daemons would solve my problem, I currently try to 
avoid them, because memory on my platform is very restricted and every 
additional running userspace process costs at least around 1 MB.)

If so, then how is it supposed to be set up? I built it for 4.9.x LTS, but 
after loading it with 'modprobe' I see nothing in the kernel log and there's 
no significant change in /proc/sys/kernel/random/entropy_avail (stays well 
below 100 most of the time). Isn't that module supposed to gather entropy from 
cpu timing jitter?

Puzzled
Alex

[1] https://www.chronox.de/jent.html



             reply	other threads:[~2020-05-08 11:49 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-05-08 11:40 Alexander Dahl [this message]
2020-05-08 11:58 ` jitterentropy_rng on armv5 embedded target Stephan Mueller
2020-05-08 12:17   ` Alexander Dahl
2020-05-08 12:22     ` Stephan Mueller
2020-05-08 12:26       ` Alexander Dahl
2020-05-08 12:30         ` Stephan Mueller

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=2567555.LKkejuagh6@ada \
    --to=ada@thorsis.com \
    --cc=linux-crypto@vger.kernel.org \
    --cc=smueller@chronox.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.