Page MenuHomePhabricator

check if the haveged entropy gathering daemon passes entropy tests in Qubes
Closed, ResolvedPublic



Needs Triage

Event Timeline

Patrick raised the priority of this task from to Normal.
Patrick updated the task description. (Show Details)
Patrick added projects: Qubes, security.
Patrick added a subscriber: Patrick.

Still have to get to this later, but...

Just saw T202.

Ran this several times in a row on Qubes + Whonix:

cat /proc/sys/kernel/random/entropy_avail

For me, it is consistently putting out results steadily in the 4000+ down to 1000+ range and then replenishing back up to 4000+ as it gets used up, across every ~10 seconds.

Check entropy available bits, 112 is FIPS-140 requirement

Hopefully this is a gauge of the same general entropy pool for the system and hopefully a positive indicator.

Yeah, well, I don't think this /proc/sys/kernel/random/entropy_avail test is particularly meaningful.

Ok, good to know. Will certainly have to get to a more thorough review of Whonix entropy in Qubes.

Patrick claimed this task.

Couldn't find any irregularities compared to non-Qubes systems.