Questions tagged [entropy-pool]
27 questions
3
votes
2 answers
How to get enough entropy into Docker containers?
Whenever I cat /proc/sys/kernel/random/entropy_avail inside my Docker containers (Linux 5.10 based), I get a double-digit result, which is apparently laughably low. Supposedly anything below 4 digits is bad, and keeping it close to 4096 (the max) is…
Spiff
- 2,578
- 17
- 20
2
votes
1 answer
How EJBCA generate private key
I'm looking for the method used by EJBCA to generate the private keys in general (CA, Sub-Ca, certificates...).
Let say for instance you want RSA 2048 key size.
Is the generation process all done in EJBCA application ?
Do they rely on Java EE-based…
Florent
- 308
- 2
- 7
2
votes
1 answer
Which password entropy for MS-CHAPv2
I am looking at connecting in a reasonably secured way mobiles to an enterprise WiFi network.
The current solutions would be user certificates on the mobiles (they are unfortunately exportable) or PEAP-MS-CHAP-v2.
PEAP-MS-CHAP-v2 is vulnerable to…
WoJ
- 3,607
- 9
- 49
- 79
2
votes
2 answers
Low entropy on CentOS 5 after new mount
I recently mounted a new partition and moved /home and /var/lib/mysql to the new drive and did a symlink to them.
Now I've noticed that the entropy (using munin) has dropped from around 3000 to around 100-200. Could the data mount and move caused…
lamp_scaler
- 577
- 1
- 6
- 18
2
votes
3 answers
Feeding the kernels entropy source from other machines and/or increasing its maximum size
We have has a little trouble with a small box that acts as a VPN end-point and mail relay for our network, caused by the available entropy for /dev/random being too low (which causes TLS connection attempts by exim to fail).
The machine doesn't do…
David Spillett
- 22,754
- 45
- 67
2
votes
1 answer
Can SSL/TLS deplete the entropy pool of my server?
I tried to gain a bit of understanding about how SSL/TLS works and had a look at the TLS handshake in TLS 1.2 and TLS 1.3, and where random numbers from the server come into play there. Since every TLS requests will have a cost in terms of entropy,…
Max1
- 123
- 3
1
vote
2 answers
what's the difference between random number input device versus output device?
The man page for rngd on Linux says -o (/dev/random) is used for random number output while -r (/dev/hwrng) for random number input. What does this mean? How do these device files differ and why are they used differently? My understanding is the the…
Michael Martinez
- 2,645
- 3
- 24
- 35
1
vote
1 answer
Haveged on Cloud Linux
I am trying to figure out how to install haveged on Cloud Linux. It doesn't seem to be avail in the repo, and trying to a do a make install does not work. My question is:
Is haveged compatible with CL, and if so, is there a repo I can simply add to…
Gordon Snappleweed
- 85
- 1
- 10
1
vote
1 answer
Windows server 2008R2: Monitoring the amount of available entropy
Is there any simple way of monitoring the amount of available entropy (random data) on windows?
I'm using Windows server 2008R2 and apache+ssl on vmware, and I'm a bit worried about starving the entropy pool.
On linux, this is available via…
Tommy
- 331
- 1
- 7
1
vote
1 answer
ssl handshake - not sure if slow
Is there any tool that would allow me to audit or check if everything is all right concerning my SSL Handshake ?
I personally found it is a bit slow, but I really don't know if it's just me.
I am currently hosted on a VPS running OpenVZ, this is…
Pierre-Olivier
- 123
- 7
0
votes
1 answer
How can I increase entropy in a Rhel 9.1 virtual machine running on Azure with the Rhel image hardened by the Centre for Internet Security?
I am having trouble running Solr 9.2 on the above virtual machine (Rhel9.1 on Azure, image from CIS).
The problem is low entropy as seen in the logs below:
Started Apache Solr 9.
Java 17 detected. Enabled workaround for SOLR-16463
Warning: Available…
Obirieni Simeo
- 11
- 3
-3
votes
1 answer
How to gather in a save, cheap and easy way high quality entropy on a Linux machine?
When no radioactive decay is available and good entropy is strongly advised for security reasons you experience a real problem. HTTPS connections consume a lot of entropy. If you have thousands of them per hour between machines low on good entropy…
