[Cryptech Tech] trng ready for play
Joachim Strömbergson
joachim at secworks.se
Thu Oct 2 15:47:37 UTC 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Aloha!
Randy Bush wrote:
> so the ROs (without the tortured transistor) take almost ten seconds
> to generate enough entropy to seed?
(I _knew_ someone would ask that questiom ;-)
No, not at all.
The rosc_entropy provider produces values at about 195 kbps. Since the
other entropy source does not provide any entropy, the rosc_entropy
provider must supply all 2048 bits needed for reseed. That is 64 words
which should take about 10 ms.
But for 32 o of those words the collector will stall until the timeout
has been reached. This is due to the fact that the collector attempts to
get them from the enabled avalanche_entropy provider.
In the movie the timeout is set to a very long time in order for us
humans to be able to see what happens. If you would lower the timeout to
a more reasonable speed that better matches the expected time (times two
or so) for the slowest entropy provider to come up with a word, the
reseed would go much faster.
Basically what you are seeing is 32 timeouts and some sigma delay for
the rosc_entropy provider.
- --
Med vänlig hälsning, Yours
Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
Joachim Strömbergson Secworks AB joachim at secworks.se
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQIcBAEBCAAGBQJULXOZAAoJEF3cfFQkIuyNkcsP/AzEM4p4dDVin5T49V4rUscM
PE2kaZYHh8N8LD5ozfNy1ENQXADp8LRbQudl1vqd76nwF0p6ZHN4wKyaWi68p1L1
Xdi0oBbmFWwiEirNas6XgVwic7jS0i+KA4epjLlP0oUD3v0wEs/aJ0VPtsnVgrTc
eM2kaHexHh5f86e4wkG+TMvONVeEzUFw8iJwbNj2P+OQ3fB2pynbdpM54tFAGszi
eOC9+eXgIahClHW6JejE8aVQc7/5VLnu0LQ0sYg/c0R1kIfbRW2gnIwefqDHmvfv
zHGgNn9D6EKHSpT2QR4bDyUQN5cU0CSDP5w9leD+PgVUVbmLsMTsWZlq1zx23zCy
vfUW+UAyTiLMjNNEfxv5PCOI2uaHBDiWRPaqOWENGYkoMlSiMnVB3+wR6LeQR+st
EjAYM4j4qGlvrzk+DyiT5SW4dAOLqcQxrhdTL9gVGm4Z8s5Bh0+gmDyEjl//6KdT
ct8hZZjsUWjxkoHP4nRSg19iiVBqX9FS8B1btuh/4RfHvICfcI0+zINXBcbBrm47
sD6cNj1Mrk9F5gxOQ4hCjDlYgdKn+oAE6kydPmPwXKUyiDZ5ntbBsQMOEI2j+2au
oaFDQT3sPYHZdG7f24DVnVjtk1oS0pElSp2QjILktIAr2X45gBZ/2QbFzbbJlmtc
8YTmD9cUeJbGW6Iu0n4S
=7fW6
-----END PGP SIGNATURE-----
More information about the Tech
mailing list