[HOME] [DOWNLOAD] [DOCS] [NEWS] [SUPPORT] [TIPS] [ISSUES] [DONATE]

Issue T32: check if the haveged entropy gathering daemon passes entropy tests

[b]Issue T32: check if the haveged entropy gathering daemon passes entropy tests in Qubes

Posted by @Patrick

January 1, 2015

https://phabricator.whonix.org/T32[/b]

General info on entropy: https://www.whonix.org/wiki/Dev/Entropy

Instructions on how to test haveged:
https://www.whonix.org/wiki/Dev/Entropy#haveged

[quote=“Qubonix, post:4, topic:769”][quote author=Patrick link=topic=847.msg6213#msg6213 date=1420130255]
check if the haveged entropy gathering daemon passes entropy tests in Qubes:
https://phabricator.whonix.org/T32
[/quote]

Please check my pastedump links. All tests were done inside the same Whonix-Workstation AppVM, based on nrgaways template.

Haveged off:
http://pastedump.eu/bTJwjRHX
http://pastedump.eu/lfzalBt8
http://pastedump.eu/gX0j3mvc
http://pastedump.eu/4rJEnrCj

Haveged on:
http://pastedump.eu/F7LKfUjn
http://pastedump.eu/nFacdE1x
http://pastedump.eu/fT0fJl6e
http://pastedump.eu/6DgREzsB[/quote]

Important security issue!

Will have to get to this as I bring my current backlog of work up to date.

It’s not time to freak out yet. Re-running that test might yield 0 failed tests and everything could be fine.

The haveged author or someone else knowledge should be consulted about how to interpret the tests. Entropy is a rabbit hole.

In any case. https://phabricator.whonix.org/T31 seems the way to go.

Yes. Not upgraded to a security bug/flaw yet. Just an issue brought to attention to confirm.

Yes.

Yes.

[Imprint] [Privacy Policy] [Cookie Policy] [Terms of Use] [E-Sign Consent] [DMCA] [Investors] [Priority Support] [Professional Support]