2 ms·
> Security people didn't want the RDRAND instruction to be trusted. The recent AMD issues have shown that you certainly shouldn't trust rdrand blindly. Even us
by the8472 7y ago
> Security people didn't want the RDRAND instruction to be trusted.
The recent AMD issues have shown that you certainly shouldn't trust rdrand blindly. Even using it after running some statistical tests would still have blocked the kernel bootup on affected machines.
> And nobody really wants their computer to just stop working
I would rather have my computer stop working than initiate cryptographic keys from an all-1s seed.
Of course filling the entropy pool should keep making progress, no matter how slowly, e.g. via the jitter RNG and eventually unblock the systeem. But until there's not enough entropy available for userspace it shouldn't pretend there is.