10 ms·
I don't know how I feel about this. It's at least stirring the pot a little bit, but—as the Pollinate README indicates—it's not really increasing the entropy i
by wtbob 12y ago
I don't know how I feel about this. It's at least stirring the pot a little bit, but—as the Pollinate README indicates—it's not really increasing the entropy in the system at all. Thus one still needs to collect actual entropy, e.g. with CPU jitter[0]—and if one has collected enough entropy that way, then stirring the pot doesn't help (although it doesn't really hurt either).
I think that the real answer has to be blocking boot until enough entropy has been gathered, based on CPU or storage timing, or on console input.
[0] http://www.chronox.de/jent/doc/CPU-Jitter-NPTRNG.html http://www.chronox.de/jent/doc/CPU-Jitter-NPTRNG.html