Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread John Crispin
On 14/06/2016 22:14, Etienne Champetier wrote: > Felix, John, is your nack on writing on every boot final? if there is an alternate way to do so then yes. as i said before, adding a optin/out option should be possible. i always went by the rule that writing a sector more than 1000 times should b

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Etienne Champetier
2016-06-14 21:15 GMT+03:00 David Lang : > On Tue, 14 Jun 2016, Etienne Champetier wrote: > >> Hi David, >> >> 2016-06-14 20:21 GMT+03:00 David Lang : >>> >>> On Tue, 14 Jun 2016, Etienne Champetier wrote: >>> 2016-06-14 9:08 GMT+02:00 Felix Fietkau : > > > On 2016-06-13 22:10, Etie

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread David Lang
On Tue, 14 Jun 2016, Etienne Champetier wrote: Hi David, 2016-06-14 20:21 GMT+03:00 David Lang : On Tue, 14 Jun 2016, Etienne Champetier wrote: 2016-06-14 9:08 GMT+02:00 Felix Fietkau : On 2016-06-13 22:10, Etienne Champetier wrote: Hi John, Felix, 2016-06-13 13:55 GMT+02:00 John Crispi

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Arjen de Korte
Citeren David Lang : On Mon, 13 Jun 2016, Daniel Curran-Dickinson wrote: On Mon, 2016-06-13 at 22:10 +0200, Etienne Champetier wrote: Before we try to minimize writes, how much writes are we talking about? my openwrt routers have multiple months of uptime, and even if we get down to 1 week,

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread David Lang
On Mon, 13 Jun 2016, Daniel Curran-Dickinson wrote: On Mon, 2016-06-13 at 22:10 +0200, Etienne Champetier wrote: Before we try to minimize writes, how much writes are we talking about? my openwrt routers have multiple months of uptime, and even if we get down to 1 week, that gets us to 53 writ

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Etienne Champetier
Hi David, 2016-06-14 20:21 GMT+03:00 David Lang : > On Tue, 14 Jun 2016, Etienne Champetier wrote: > >> 2016-06-14 9:08 GMT+02:00 Felix Fietkau : >>> >>> On 2016-06-13 22:10, Etienne Champetier wrote: Hi John, Felix, 2016-06-13 13:55 GMT+02:00 John Crispin : > > > >

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread David Lang
On Tue, 14 Jun 2016, Etienne Champetier wrote: 2016-06-14 9:08 GMT+02:00 Felix Fietkau : On 2016-06-13 22:10, Etienne Champetier wrote: Hi John, Felix, 2016-06-13 13:55 GMT+02:00 John Crispin : On 13/06/2016 00:56, Etienne Champetier wrote: Hi Felix, 2016-06-12 12:45 GMT+02:00 Felix Fiet

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Daniel Curran-Dickinson
On Mon, 2016-06-13 at 22:10 +0200, Etienne Champetier wrote: > Before we try to minimize writes, how much writes are we talking about? > my openwrt routers have multiple months of uptime, and even if we get > down to 1 week, that gets us to 53 writes a year. > How much writes can a flash handle th

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Kevin Darbyshire-Bryant
On 14/06/16 10:05, Kevin Darbyshire-Bryant wrote: On 14/06/16 09:13, Etienne Champetier wrote: Ok, let's find a middle ground :) What about saving a seed if there is none (on boot), and then using an ntp hotplug (stratum event) and save a new seed if older than say 1 week? Etienne And I'll

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Kevin Darbyshire-Bryant
On 14/06/16 09:13, Etienne Champetier wrote: 2016-06-14 9:08 GMT+02:00 Felix Fietkau : On 2016-06-13 22:10, Etienne Champetier wrote: Hi John, Felix, 2016-06-13 13:55 GMT+02:00 John Crispin : On 13/06/2016 00:56, Etienne Champetier wrote: Hi Felix, 2016-06-12 12:45 GMT+02:00 Felix Fietka

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Felix Fietkau
On 2016-06-14 10:13, Etienne Champetier wrote: >>> Before we try to minimize writes, how much writes are we talking about? >>> my openwrt routers have multiple months of uptime, and even if we get >>> down to 1 week, that gets us to 53 writes a year. >>> How much writes can a flash handle these day

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Etienne Champetier
2016-06-14 9:08 GMT+02:00 Felix Fietkau : > On 2016-06-13 22:10, Etienne Champetier wrote: >> Hi John, Felix, >> >> 2016-06-13 13:55 GMT+02:00 John Crispin : >>> >>> >>> On 13/06/2016 00:56, Etienne Champetier wrote: Hi Felix, 2016-06-12 12:45 GMT+02:00 Felix Fietkau : > On 2016-

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-14 Thread Felix Fietkau
On 2016-06-13 22:10, Etienne Champetier wrote: > Hi John, Felix, > > 2016-06-13 13:55 GMT+02:00 John Crispin : >> >> >> On 13/06/2016 00:56, Etienne Champetier wrote: >>> Hi Felix, >>> >>> 2016-06-12 12:45 GMT+02:00 Felix Fietkau : On 2016-06-11 08:37, Etienne CHAMPETIER wrote: > This com

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-13 Thread Etienne Champetier
Hi John, Felix, 2016-06-13 13:55 GMT+02:00 John Crispin : > > > On 13/06/2016 00:56, Etienne Champetier wrote: >> Hi Felix, >> >> 2016-06-12 12:45 GMT+02:00 Felix Fietkau : >>> On 2016-06-11 08:37, Etienne CHAMPETIER wrote: This commit: 1) seed /dev/urandom with a saved seed as early as

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-13 Thread David Lang
Just a FYI in case you didn't see it, Ted Ts'o posted a 7-patch cluster for changing urandom that he plans to get into the next kernel Subject: PATCH-v4 0/7] random: replace urandom pool with a CRNG https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1166186.html David Lang ___

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-13 Thread Kevin Darbyshire-Bryant
On 13/06/16 12:55, John Crispin wrote: On 13/06/2016 00:56, Etienne Champetier wrote: Hi Felix, 2016-06-12 12:45 GMT+02:00 Felix Fietkau : On 2016-06-11 08:37, Etienne CHAMPETIER wrote: This commit: 1) seed /dev/urandom with a saved seed as early as possible (using /lib/preinit/81_uran

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-13 Thread John Crispin
On 13/06/2016 00:56, Etienne Champetier wrote: > Hi Felix, > > 2016-06-12 12:45 GMT+02:00 Felix Fietkau : >> On 2016-06-11 08:37, Etienne CHAMPETIER wrote: >>> This commit: >>> 1) seed /dev/urandom with a saved seed as early as possible >>>(using /lib/preinit/81_urandom_seed) >>> 2) save a n

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-12 Thread Etienne Champetier
Hi Felix, 2016-06-12 12:45 GMT+02:00 Felix Fietkau : > On 2016-06-11 08:37, Etienne CHAMPETIER wrote: >> This commit: >> 1) seed /dev/urandom with a saved seed as early as possible >>(using /lib/preinit/81_urandom_seed) >> 2) save a new seed using getrandom() so we are sure /dev/urandom >>

Re: [LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-12 Thread Felix Fietkau
On 2016-06-11 08:37, Etienne CHAMPETIER wrote: > This commit: > 1) seed /dev/urandom with a saved seed as early as possible >(using /lib/preinit/81_urandom_seed) > 2) save a new seed using getrandom() so we are sure /dev/urandom >pool is initialized (using /etc/init.d/urandom_seed) > > see

[LEDE-DEV] [PATCH] base-files: seed /dev/urandom

2016-06-10 Thread Etienne CHAMPETIER
This commit: 1) seed /dev/urandom with a saved seed as early as possible (using /lib/preinit/81_urandom_seed) 2) save a new seed using getrandom() so we are sure /dev/urandom pool is initialized (using /etc/init.d/urandom_seed) seed size is 512 bytes (ie /proc/sys/kernel/random/poolsize / 8)