Questions tagged [entropy-pool]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
349 views

Can SSL/TLS deplete the entropy pool of my server?

I tried to gain a bit of understanding about how SSL/TLS works and had a look at the TLS handshake in TLS 1.2 and TLS 1.3, and where random numbers from the server come into play there. Since every ...
2
votes
1answer
64 views

Is it safe to use SSH for periodic command execution on remote Server regarding usage of entropy?

I'm planning to set up periodic checks for system health on a multiple remote systems. To achieve this I've set up key-based authentication to execute scripts on remote side without interaction i.e.: ...
1
vote
2answers
77 views

what's the difference between random number input device versus output device?

The man page for rngd on Linux says -o (/dev/random) is used for random number output while -r (/dev/hwrng) for random number input. What does this mean? How do these device files differ and why are ...
-3
votes
1answer
118 views

How to gather in a save, cheap and easy way high quality entropy on a Linux machine? [closed]

When no radioactive decay is available and good entropy is strongly advised for security reasons you experience a real problem. HTTPS connections consume a lot of entropy. If you have thousands of ...
3
votes
1answer
549 views

Increasing Entropy on CoreOS

I'm trying out coreos on a kubernetes cluster. This setup includes a bind server serving DNSSEC responses. Because of the DNSSEC key management, the bind server uses up all the available entropy and ...
2
votes
1answer
780 views

How EJBCA generate private key

I'm looking for the method used by EJBCA to generate the private keys in general (CA, Sub-Ca, certificates...). Let say for instance you want RSA 2048 key size. Is the generation process all done in ...
1
vote
1answer
439 views

Haveged on Cloud Linux

I am trying to figure out how to install haveged on Cloud Linux. It doesn't seem to be avail in the repo, and trying to a do a make install does not work. My question is: Is haveged compatible with ...
5
votes
0answers
415 views

Low Entropy on Container

I am thinking my entropy level may be low? $ cat /proc/sys/kernel/random/entropy_avail I am around 132-178 on average. Pool size is default 4096 (this is a container on a virtualizer by the way). ...
5
votes
1answer
6k views

Some questions about kernel.random.* parameters

I'm trying to understand the linux kernel parameters which are under /proc/sys/kernel/random/, but I have some troubles. Could you help me figure some things out? What is the boot_id parameter used ...
12
votes
1answer
1k views

How can I detect incidents of entropy depletion?

I recently had my first encounter with a depleted entropy pool, and I was disappointed to learn that none of the usual system logs were helpful in discovering the problem. After installing CUPS on a ...
1
vote
1answer
1k views

Windows server 2008R2: Monitoring the amount of available entropy

Is there any simple way of monitoring the amount of available entropy (random data) on windows? I'm using Windows server 2008R2 and apache+ssl on vmware, and I'm a bit worried about starving the ...
6
votes
2answers
2k views

Do Windows virtual machines suffer from entropy shortage too?

Recently we ran into a problem where one of our Linux-based virtual machines was really slow due to a chronic shortage of "entropy". I'm wondering if Windows virtual machines would suffer from the ...
5
votes
4answers
4k views

Server suddenly running out of entropy

Since a reboot yesterday, one of our virtual servers (Debian Lenny, virtualized with Xen) is constantly running out of entropy, leading to timeouts etc. when trying to connect over SSH / TLS-enabled ...
1
vote
1answer
268 views

ssl handshake - not sure if slow

Is there any tool that would allow me to audit or check if everything is all right concerning my SSL Handshake ? I personally found it is a bit slow, but I really don't know if it's just me. I am ...
10
votes
3answers
699 views

How to tell when an Entropy Key is overloaded?

I have several Entropy Keys with egd in front of them and then all load balanced by haproxy. I then have many client machines using the haproxy service IP as a network source of entropy. I have no ...
2
votes
1answer
555 views

Which password entropy for MS-CHAPv2

I am looking at connecting in a reasonably secured way mobiles to an enterprise WiFi network. The current solutions would be user certificates on the mobiles (they are unfortunately exportable) or ...
7
votes
1answer
1k views

How does Apache interpret multiple SSLRandomSeed sources

In my Apache configuration I have these lines: SSLRandomSeed connect builtin SSLRandomSeed connect file:/dev/random SSLRandomSeed connect file:/dev/urandom 1024 How, exactly, does Apache interpret ...
12
votes
2answers
11k views

Entropy on virtual machines

As you might know that it's not as easy to generate entropy on a virtual machine as on a "normal" pc. Generating a gpg-key on a virtual machine can take a while, even with the correct tools. There ...
6
votes
4answers
13k views

How to fix the entropy pool issue with RHEL 5.x

RHEL 5.x has an entropy-generation problem (held-over from kernel 2.4). Following directions from here has produced little-to-no results: How to increase entropy pool on a 2.6 kernel RHEL/Fedora ...
2
votes
2answers
2k views

Low entropy on CentOS 5 after new mount

I recently mounted a new partition and moved /home and /var/lib/mysql to the new drive and did a symlink to them. Now I've noticed that the entropy (using munin) has dropped from around 3000 to ...
3
votes
1answer
1k views

Distributing entropy to virtual machines

I'm interested in generating secret keys for SSL on virtual machines using true randomness. By true randomness I mean the same level of entropy that can be generated by UNIX's dev/random and entropy ...
35
votes
4answers
27k views

Explain in Plain English about Entropy Available

If I run this command in Ubuntu sudo cat /proc/sys/kernel/random/entropy_avail it returns a number that indicates how much "entropy" is available to the kernel, but that's about all I know. What ...
2
votes
3answers
2k views

Feeding the kernels entropy source from other machines and/or increasing its maximum size

We have has a little trouble with a small box that acts as a VPN end-point and mail relay for our network, caused by the available entropy for /dev/random being too low (which causes TLS connection ...
3
votes
3answers
1k views

Munin “Available entropy” when using address space layout randomization

Having just configured Munin for statistics logging on my gentoo server (hardened profile), I am noticing that my "Available entropy" is consitently in the 200-300 range. This seems way to low, so I ...