3 ms·
> even if there are suitable sources for entropy in the system What might those be on, say, a freshly booted RasPi that hasn't even brought up much of userspac
by dmitrygr 7y ago
> even if there are suitable sources for entropy in the system
What might those be on, say, a freshly booted RasPi that hasn't even brought up much of userspace besides systemd?
- jlgaddis 7y agoThe Raspberry Pi has a HWRNG onboard.
- dmitrygr 7y agoDo you trust it?
- tatersolid 7y agoYou’re forced to trust the maker of your CPU, mainboard, etc. if you can’t trust your hardware you’re toast. There’s nothing special about RNGs in this regard.
- leni536 7y agoThe problematic commit reduced the number of disk IO at bootup which resulted in starving getrandom() from the necessary entropy. If disk IO is already considered a reliable source of entropy then there is no reason to not actively exercise it when entropy is needed.