|
|
Log in / Subscribe / Register

Problems emerge for a unified /dev/*random

Problems emerge for a unified /dev/*random

Posted Mar 30, 2022 12:39 UTC (Wed) by ncm (guest, #165)
In reply to: Problems emerge for a unified /dev/*random by jepler
Parent article: Problems emerge for a unified /dev/*random

Nowadays most devices come with a hardware random number generating device attached, typically a camera, radio, or microphone. The low bits of analog-to-digital converters provide a copious supply of entropy that the upper bits, howsoever predictable, cannot steal away.

Such devices might be more trustworthy than the "hardware RNG" instructions provided on processor cores, which we have seen demonstrated (in a recent AMD erratum) may be reliably turned off from microcode, and, we may presume, from an appropriate not-publicly-documented instruction sequence. Whether to try to defend against such an attack depends on your threat model, of course; if so, an unreliable source of random numbers might be the least of your problems. But defense in depth has rarely been a mistake.


to post comments


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds