[tahoe-lafs-trac-stream] [tahoe-lafs] #1924: NetBSD < 6.0 /dev/random appears to break RSA keygen in test suites

tahoe-lafs trac at tahoe-lafs.org
Thu Apr 11 06:20:05 UTC 2013


#1924: NetBSD < 6.0 /dev/random appears to break RSA keygen in test suites
-------------------------------+------------------------------------
     Reporter:  midnightmagic  |      Owner:
         Type:  defect         |     Status:  new
     Priority:  major          |  Milestone:  undecided
    Component:  code           |    Version:  1.9.2
   Resolution:                 |   Keywords:  netbsd random cryptopp
Launchpad Bug:                 |
-------------------------------+------------------------------------

Comment (by zooko):

 Ah, I see that the comment in  [//trac/pycryptopp/browser/git/src-
 cryptopp/osrng.h?annotate=blame&rev=9c884d4ea2c75bc47dc49d4c404bfc5a9fc3b437#L84]
 says:

 {{{
         //! use blocking to choose seeding with BlockingRng or
 NonblockingRng. the parameter is ignored if only one of these is available
 }}}

 So apparently NetBSD (at least old NetBSD 5.x?) does not have a non-
 blocking PRNG, so the fact that we pass {{{false}}} there, requesting a
 non-blocking PRNG, should be ignored. Aha! This looks like the bug, then:

 [source:git/src-
 cryptopp/config.h?annotate=blame&rev=9c884d4ea2c75bc47dc49d4c404bfc5a9fc3b437#L393
 config.h] says that if this is a Unix then it has a non-blocking PRNG.

 Is that the bug? Should we add some conditions to config.h so that it
 won't define {{{NONBLOCKING_RNG_AVAILABLE}}} on NetBSD?

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1924#comment:13>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list