dreamingdarkness
September 21st, 2009, 05:22 AM
Hopefully I have the right forum for this -
I'm going to be generating a few encryption keys in the near future, and research shows that entropy available is a key component in ensuring there is enough randomness to make the keys harder to determine.
In /proc/sys/kernel/random, I've been checking entropy_avail and it seems consistently low - mouse and keyboard usage manage to keep it up over 100, with occasional spikes as high as 250, or intensive mouse-movement running possibly up to 400 or so.
When I first added entropy_aval monitoring to my .conkyrc for conky, the entropy_avail would drive as high as 2000-3500 with constant mouse and keyboard use.
I am not certain what package I have since installed may be creating a constant drain on the entropy pool, which has a max size of 4096.
Is there any way to tell what is pulling all the entropy out of my system, so that I can ensure these keys are as secure as possible in terms of the quality of the random number generation?
Any thoughts would be appreciated.
I'm going to be generating a few encryption keys in the near future, and research shows that entropy available is a key component in ensuring there is enough randomness to make the keys harder to determine.
In /proc/sys/kernel/random, I've been checking entropy_avail and it seems consistently low - mouse and keyboard usage manage to keep it up over 100, with occasional spikes as high as 250, or intensive mouse-movement running possibly up to 400 or so.
When I first added entropy_aval monitoring to my .conkyrc for conky, the entropy_avail would drive as high as 2000-3500 with constant mouse and keyboard use.
I am not certain what package I have since installed may be creating a constant drain on the entropy pool, which has a max size of 4096.
Is there any way to tell what is pulling all the entropy out of my system, so that I can ensure these keys are as secure as possible in terms of the quality of the random number generation?
Any thoughts would be appreciated.