Skip to content

Comment on Linux RNG RFC Patch: implement getrandom() in vDSO

Comments

Why not just have the kernel map a page containing random bytes, that it rewrites with newly seeded random bytes when needed? Then userspace CSPRNGs could use that as a basis for their own reseeding.

How often do you reseed?

How frequently does the kernel populate these pages with new entropy (for every process, pre-emptively?)

Does this avoid pagefaults or other process interrupts? Don't want process interrupting every time it accesses the 'magic page of random'.

Surely these are all pain points that Intel's `RDRAND` is supposed to alleviate.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.