[Bug 575669] Re: Rapid depletion of entropy pool

Kees Cook kees at ubuntu.com
Wed May 5 23:45:00 UTC 2010


AT_RANDOM is used by default in the Linux kernel since 2.6.29:

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=f06295b44c296c8fb08823a3118468ae343b60f2

Almost all modern Linux systems use ASLR and stack protections that need
a small amount of entropy per process.  Since urandom always remixes, it
doesn't strictly run out, but the entropy drops.  In theory, this isn't
a problem since the state of the pool cannot be extracted, guessed, or
replayed.

It would be nice to have another entropy pool in the kernel for these
things, like Schneier's pRNG from the Practical Cryptography book.

-- 
Rapid depletion of entropy pool
https://bugs.launchpad.net/bugs/575669
You received this bug notification because you are a member of Kernel
Bugs, which is subscribed to linux in ubuntu.




More information about the kernel-bugs mailing list