From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1762614AbYEOXCg (ORCPT ); Thu, 15 May 2008 19:02:36 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1755460AbYEOXCZ (ORCPT ); Thu, 15 May 2008 19:02:25 -0400 Received: from out1.smtp.messagingengine.com ([66.111.4.25]:40917 "EHLO out1.smtp.messagingengine.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755429AbYEOXCY (ORCPT ); Thu, 15 May 2008 19:02:24 -0400 X-Sasl-enc: 0fQA9mamTezvOo4swcO8O2b+hl6linIf6sHZW2AqPOGV 1210892543 Date: Thu, 15 May 2008 20:02:21 -0300 From: Henrique de Moraes Holschuh To: Jeff Garzik Cc: Theodore Tso , Chris Peterson , "Kok, Auke" , Rick Jones , "Brandeburg, Jesse" , Alan Cox , netdev@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH] drivers/net: remove network drivers' last few uses of IRQF_SAMPLE_RANDOM Message-ID: <20080515230221.GC20976@khazad-dum.debian.net> References: <482C7B18.6060003@garzik.org> <482C7E53.3050300@hp.com> <482C8184.2030906@garzik.org> <482C8550.5000909@intel.com> <482C8D4D.3040702@garzik.org> <20080515214721.GP18825@mit.edu> <482CB1FB.7080807@garzik.org> <20080515222941.GB20976@khazad-dum.debian.net> <482CBCC6.6010905@garzik.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <482CBCC6.6010905@garzik.org> X-GPG-Fingerprint: 1024D/1CDB0FE3 5422 5C61 F6B7 06FB 7E04 3738 EE25 DE3F 1CDB 0FE3 User-Agent: Mutt/1.5.17+20080114 (2008-01-14) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 15 May 2008, Jeff Garzik wrote: > Henrique de Moraes Holschuh wrote: >> If anyone wants to poke at it, get the Debian rng-tools source package. >> It directly supports the VIA PadLock in userspace in a suitably paranoid >> mode (checks that the RNG was not reprogrammed at every read), and does >> multithreading so that FIPS and output processing does not block (nor >> gets blocked) by /dev/hw_random reading, etc. > > Neat. I always did prefer VIA padlock in userspace. > > I just sorta assumed a buffering, interrupt-driver TPM RNG driver would > be better than doing it from userspace, but maybe that was a bad > assumption to make on my part. It should be quite doable to support TPM > RNG entirely via userspace, at any rate. I will tell you what. If someone manages to get trousers to actually *work* for data binding and sealing to the TPM in a ThinkPad T43 with an NSC/Winbond TPM (their "sup3r s3kr1t TPM-inside-the-SuperIO 8394T" crap one needs a NDA to get the documentation for), and I manage to duplicate it (i.e. make it work here too), I will write the rng-tools trousers interface code (at least for the Debian version) :-) The kernel TPM driver works, the BIOS works, and I have the PCRs updated properly during boot, but trousers get the tpm pubek key wrong for some reason (the kernel driver can read it just fine). The chip is good, IBM's stuff worked just fine with it. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh