{"id":102843,"date":"2022-01-02T21:37:00","date_gmt":"2022-01-02T19:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7"},"modified":"2022-01-02T21:37:00","modified_gmt":"2022-01-02T19:37:00","slug":"%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","title":{"rendered":"A proposal has been made for the Linux kernel implementation of \/dev\/random, freeing it from reliance on SHA-1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jason A. Donenfeld, the author of the WireGuard VPN, has proposed an updated implementation of the RDRAND pseudo-random number generator, responsible for the operation of the \/dev\/random and \/dev\/urandom devices in the Linux kernel. At the end of November, Jason was added to the list of maintainers of the random driver and has now published the first results of his work on its overhaul. <\/p>\n
The new implementation is notable for its transition to using the BLAKE2s hash function instead of SHA1 for entropy mixing operations. This change has enhanced the security of the pseudorandom number generator by eliminating the problematic SHA1 algorithm and preventing the overwriting of the RNG initialization vector. As the BLAKE2s algorithm outperforms SHA1, its application has also positively impacted the performance of the pseudorandom number generator (testing on a system with an Intel i7-11850H processor showed a 131% increase in speed). Another advantage of switching entropy mixing to BLAKE2 is the unification of algorithms used \u2014 BLAKE2 is employed in the ChaCha cipher, which is already in use for generating random sequences. <\/p>\n
Additionally, improvements have been made to the cryptographically secure pseudo-random number generator CRNG, used in the getrandom call. The enhancements focus on limiting the use of the slow RDRAND generator when extracting entropy, which allows for a 3.7 times performance boost. Jason demonstrated that calling RDRAND makes sense only when CRNG is not yet fully initialized, but once CRNG initialization is complete, its value does not affect the quality of the generated sequence, and it is possible to avoid calling RDRAND in this case. <\/p>\n