faster /dev/random

Bill Davidsen davidsen at tmr.com
Sun Aug 22 19:34:11 UTC 2010


Wolfgang S. Rupprecht wrote:
> Is there an approved way to increase the speed at which the random pool
> for /dev/random fills up?  I'm playig with dnssec and getnerating 2k rsa
> keys is taking up to 3 hours.  I've been googling a bit and Intel x86_64
> machines seem to have random number hardware built in (perhaps also
> AMD???)  Is there a way to funnel this into the entropy pool?
> 
To be honest, I thought the data from the TCO random generator was funneled in 
already. That's what the "intel-rng" module does.

Current kernel built with:
CONFIG_HW_RANDOM=y
CONFIG_HW_RANDOM_TIMERIOMEM=m
CONFIG_HW_RANDOM_INTEL=m
CONFIG_HW_RANDOM_AMD=m
CONFIG_HW_RANDOM_GEODE=m
CONFIG_HW_RANDOM_VIA=m
CONFIG_HW_RANDOM_VIRTIO=m

If your CPU has the hardware the module should be loaded, but you can check with 
"lsmod | grep rng" to be sure, or load manually to test. Also virtio_rng might 
be useful. You might have to load by hand to test, then config to load by 
default if you want.

-- 
Bill Davidsen <davidsen at tmr.com>
   "We have more to fear from the bungling of the incompetent than from
the machinations of the wicked."  - from Slashdot


More information about the users mailing list