search

tomeshnet / mesh-orange

A small ramdisk system running modern Debian to support mesh networking on ARM single-board computers
https://tomeshnet.github.io/mesh-orange/
GNU General Public License v2.0
39 stars 7 forks source link

Investigate whether haveged will solve entropy problem #7

Open benhylau opened 7 years ago

benhylau commented 7 years ago

Can we safely generate keys (e.g. cjdns) on the node if we install haveged?

hamishcoleman commented 7 years ago

Another avenue for the random number question is to use the hardware random number generator.

The Orange Pi Zero uses a H2+ chip, which is basically a H3 chip. The Allwinner H3 Datasheet V1.2 describes the onboard Crypto Engine in section 4.15 and documents that that this has two different random number generators.

Unfortunately, the linux kernel does not appear to have a driver for this hardware. But it does look possible to do.

What is missing is documentation from Allwinner about just how the two RNGs are generated..