3 ms·
Sounds like they need a way for userspace to state it accepts that it is running on a system that doesn’t have randomness available. Unfortunately that requires
by tinus_hn 5y ago
Sounds like they need a way for userspace to state it accepts that it is running on a system that doesn’t have randomness available. Unfortunately that requires a change to userspace.
- dinosaurdynasty 5y agogetrandom(GRND_INSECURE) is this
- tinus_hn 5y agoI mean some kind of toggle that disables the whole entropy counting so you don’t have to change all the executables. Today you can emulate old computers in such a way you can run it 10 times and get exactly the same result each time. If you were able to run the Linux kernel like this there simply is no way to get randomness. The solutions I can imagine are for the kernel to block, as happened here, for the kernel to give back numbers that aren’t really random (because if you rerun the emulation you’ll get the same numbers) or for userspace to say the system accepts numbers that aren’t secure random numbers.
- staticassertion 5y agoYes, I think that ultimately the solution is to remove entropy counting entirely.
- KSPAtlas 5y agoDon't break userspace!