[PATCH] getrandom: new applet

[Etienne Champetier]

2016-07-03 18:46 GMT+02:00 Denys Vlasenko <vda.linux at googlemail.com>:
> On Tue, Jun 28, 2016 at 7:47 PM, walter harms <wharms at bfs.de> wrote:
>> perhaps a better aim ist to improve the $RANDOM in ash ?
>
>
> $RAMDOM generator in my tests passed all "dieharder -g 200 -a" tests.
> How much better than this do you need?

The problem is between reboot of the same device or between multiple
identical devices, you will have the same state.
Take AES in CTR mode with key 0 and counter 0, it will pass dieharder
with no problem, but the next boot will be predictible.

CSPRNG depend on having a good seed, ie having finished the
initialization, and you know that init is done when getrandom()
unblocks.