Page 1 of 1

[SOLVED] Entropy and HWRNG after core 122 update

Posted: August 14th, 2018, 10:10 am
by datamorgana
My IPfire still runs with an 32bit-PAE kernel and I cannot change to a 64bit installation on the short term. However, my beloved hardware RNG USB stick is not working anymore after the update to core 122. The rngd crashes after start and the entropy has decreased from approx. 4kbit to 400bit which is not so nice. Is there a solution already?

Thanks and regards
datamorgana

---

Mein IPfire läuft noch mit einem 32bit-PAE-Kernel und ich kann aus mehreren Gründen noch nicht auf 64bit upgraden. Dennoch würde ich gerne meinen bewährten HWRNG-USB-Stick weiter verwenden, was nach dem Core 122 Update nicht mehr geht, da der rngd sich nicht mehr starten lässt. Die Entropie der Kiste ist seitdem von ca. 4000bit auf ca. 400bit gesunken. Nicht so toll... Ist hier schon eine Lösung in Sicht?

Danke und Grüße
datamorgana

Image

Re: Entropy and HWRNG after core 122 update

Posted: August 14th, 2018, 10:54 am
by Arne.F
You need to change the udev scripts for the tty rng because /dev/hwrng already exists with kernel 4.14 also if there is no supported kernel hwrng.

Add a command to remove /dev/hwrng before creating the symlink to the usb device of you tty rng

Re: [SOLVED] Entropy and HWRNG after core 122 update

Posted: August 15th, 2018, 7:53 am
by datamorgana
Thanks Arne, that was of great help to me!

Actually I did not remove the "/dev/hwrng" device that might be needed by kernel 4.14 but I changed the "/lib/udev/rules.d/90-hwrng.rules" file I once created when I deployed the TrueRNG stick and chose a different name for the SYMLINK "/dev/truerng" to be created, like

Code: Select all

SUBSYSTEM=="tty", ATTRS{product}=="TrueRNG", SYMLINK+="truerng", RUN+="/bin/stty raw -echo -ixoff -F /dev/%k speed 3000000"
ATTRS{idVendor}=="04d8", ATTRS{idProduct}=="f5fe", ENV{ID_MM_DEVICE_IGNORE}="1"
Then I changed the "/etc/init.d/rngd" file in the "start" case section to read

Code: Select all

loadproc /usr/sbin/rngd --quiet --rng-device=/dev/truerng
Now it works and IPfire has >3kbit entropy. ;D

Code: Select all

[root@IPfire ~]# ls -la /dev/*rng
crw------- 1 root root 10, 183 Aug 15 09:27 /dev/hwrng
lrwxrwxrwx 1 root root       7 Aug 15 09:27 /dev/truerng -> ttyACM0
Thanks,
datamorgana

Re: Entropy and HWRNG after core 122 update

Posted: August 15th, 2018, 10:52 am
by Arne.F
This is off course the better solution...

Re: Entropy and HWRNG after core 122 update

Posted: August 15th, 2018, 3:54 pm
by Lux73
my 64bit Installation had the same problem after core 122 update...

THX for the Solution!

Greetings from Germany

Re: [SOLVED] Entropy and HWRNG after core 122 update

Posted: August 20th, 2018, 11:52 am
by datamorgana
BTW the hardware solution for TrueRNG that I'm using with IPfire is described here: https://ubld.it/products/truerng-hardwa ... generator/

Re: [SOLVED] Entropy and HWRNG after core 122 update

Posted: August 20th, 2018, 2:19 pm
by extrasolar
I'm also interested in this device, but I couldn't find a local online shop yet to avoid high shipping costs to Germany.

Re: [SOLVED] Entropy and HWRNG after core 122 update

Posted: August 20th, 2018, 2:38 pm
by datamorgana
Sadly enough there seems to be no local shop in Germany. When I bought this item back in 2015, I ordered 4 pieces to justify the high (but compared to 2018 still much lower) shipping costs. After some shipments got lost on the way to Germany, Tindie now ships with insurance which makes it more expensive. I have no experiences with Amazon.com shipment from the USA.

Re: [SOLVED] Entropy and HWRNG after core 122 update

Posted: August 20th, 2018, 4:30 pm
by Lux73
@ extrasolar

this is similar from Germany: http://www.ibbergmann.org/ZUFALLSGENERA ... ce/PRG310/

this works for me 8)