Page MenuHomePhabricator

check if the haveged entropy gathering daemon passes entropy tests in Qubes
Closed, ResolvedPublic

Description

Details

Impact
Needs Triage

Event Timeline

Patrick created this task.Jan 1 2015, 5:37 PM
Patrick raised the priority of this task from to Normal.
Patrick updated the task description. (Show Details)
Patrick added projects: Qubes, security.
Patrick added a subscriber: Patrick.

Still have to get to this later, but...

Just saw T202.

Ran this several times in a row on Qubes + Whonix:

cat /proc/sys/kernel/random/entropy_avail

For me, it is consistently putting out results steadily in the 4000+ down to 1000+ range and then replenishing back up to 4000+ as it gets used up, across every ~10 seconds.

Check entropy available bits, 112 is FIPS-140 requirement

Hopefully this is a gauge of the same general entropy pool for the system and hopefully a positive indicator.

Yeah, well, I don't think this /proc/sys/kernel/random/entropy_avail test is particularly meaningful.

Ok, good to know. Will certainly have to get to a more thorough review of Whonix entropy in Qubes.

Patrick set Impact to Needs Triage.
Patrick added subscribers: nrgaway, marmarek.
Patrick closed this task as Resolved.Aug 19 2015, 8:17 PM
Patrick claimed this task.

Couldn't find any irregularities compared to non-Qubes systems.