Re: [PATCH] API for true Random Number Generators to add entropy (2.6.11)

Jeff Garzik
2005-03-24T21:00:57Z

Jean-Luc Cooke wrote:
> On Thu, Mar 24, 2005 at 07:48:18AM -0500, Jeff Garzik wrote:
>
>>If you want to add entropy to the kernel entropy pool from hardware RNG,
>>you should use the userland daemon, which detects non-random (broken)
>>hardware and provides throttling, so that RNG data collection does not
>>consume 100% CPU.
>>
>>If you want to use the hardware RNG directly, it's simple: just open
>>/dev/hw_random.
>>
>>Hardware RNG should not go kernel->kernel without adding FIPS tests and
>>such.
>
>
> If your RNG were properly written, it shouldn't matter if the data you're
> pumping into /dev/random passed muster or not. If you're tracking entropy
> count, then that's a different story of course.

It's rather lame to add data, without also crediting entropy.

Further, it wastes many CPU cycles in many places, if you are doing
nothing but pumping bad data (all 1's, for example) into /dev/random.

> I've been commissioned to write Fortuna RNG for Linux and weddings, houses and
> cars not withstanding, I should I it ready soon to be given to LKML for
> digestion.

Sounds great.

Jeff