check if the haveged entropy gathering daemon passes entropy tests in Qubes

[phabricator-migrator]

Information

ID: 32
PHID: PHID-TASK-w4mt7nym34qkzu57fj34
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

General info on entropy:

Entropy, Randomness, /dev/random vs /dev/urandom, Entropy Sources, Entropy...

Instructions on how to test haveged:

Entropy, Randomness, /dev/random vs /dev/urandom, Entropy Sources, Entropy...

Forum Discussion:

• Whonix Forum

Comments

---

WhonixQubes

2015-03-01 21:58:44 UTC

Still have to get to this later, but…

Just saw T202.

Ran this several times in a row on Qubes + Whonix:

cat /proc/sys/kernel/random/entropy_avail

For me, it is consistently putting out results steadily in the 4000+ down to 1000+ range and then replenishing back up to 4000+ as it gets used up, across every ~10 seconds.

Check entropy available bits, 112 is FIPS-140 requirement

Hopefully this is a gauge of the same general entropy pool for the system and hopefully a positive indicator.

---

Patrick

2015-03-01 22:01:57 UTC

Yeah, well, I don’t think this /proc/sys/kernel/random/entropy_avail test is particularly meaningful.

---

WhonixQubes

2015-03-01 22:05:48 UTC

Ok, good to know. Will certainly have to get to a more thorough review of Whonix entropy in Qubes.

---

Patrick

2015-08-19 18:17:08 UTC

Couldn’t find any irregularities compared to non-Qubes systems.