Re: [PATCH v31 00/12] /dev/random - a new approach with full SP800-90B

From: Pavel Machek
Date: Tue Jul 28 2020 - 16:40:49 EST


Hi!

> The following patch set provides a different approach to /dev/random which is called
> Linux Random Number Generator (LRNG) to collect entropy within the Linux kernel. The
> main improvements compared to the existing /dev/random is to provide sufficient entropy
> during boot time as well as in virtual environments and when using SSDs. A secondary
> design goal is to limit the impact of the entropy collection on massive parallel systems
> and also allow the use accelerated cryptographic primitives. Also, all steps of the
> entropic data processing are testable.

That sounds good.. maybe too good. Where does LRNG get the entropy? That is the
part that should be carefully documented..

Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html