Linux /dev/random changes on the way ...

[Jim Cheetham]

This LWN article https://lwn.net/Articles/808575/ (available to the general
public on 16th Jan 2020) discusses some interesting changes to the
/dev/random handling on Linux, removing the "blocking when entropy
estimates are low" behaviour during normal usage.

There's also an understanding that the *estimation* of entropy itself is
fundamentally flawed for many machines, and therefore the job of being
cryptographically-secure should be handed off to userland, and not darken
the kernel's doors again.

I'll repost to this thread again when the full article (and comments)
becomes available, in the meantime if you want you can read the kernel
mailing list archives, perhaps starting with
https://lwn.net/ml/linux-kernel/cover.1577088521.git.luto@kernel.org/

-jim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ourshack.com/pipermail/discuss/attachments/20200109/c773c1e6/attachment.html>