rng-tools PKCS#11 and rtlsdr

rng-tools PKCS#11 and rtlsdr

[ummeegge]

[-- Attachment #1: Type: text/plain, Size: 518 bytes --]

Hi all,
am currently updating the rng-tools and there are some new compile
options needed to compile it.

  --without-pkcs11        Disable pkcs11 support.
  --without-rtlsdr        Disable rtlsdr support.

so a question arises for me, should we enable Smartcards -->
https://github.com/OpenSC/OpenSC/wiki
and also DVB dongles as entropy resources -->
https://github.com/librtlsdr/librtlsdr
for the rng-tools --> https://github.com/nhorman/rng-tools/releases in
IPFire, whereby two new libs are needed ?

Best,

Erik

Re: rng-tools PKCS#11 and rtlsdr

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 938 bytes --]

Hello Erik,

I would say that we can disable both things.

We do not encourage people to add any SDRs and we do not need any PKCS#11 support here either. rngd isn’t very useful at all any more, and we should not encourage people to feed arbitrary entropy into their pools.

-Michael

> On 5 Oct 2020, at 17:31, ummeegge <ummeegge(a)ipfire.org> wrote:
> 
> Hi all,
> am currently updating the rng-tools and there are some new compile
> options needed to compile it.
> 
>  --without-pkcs11        Disable pkcs11 support.
>  --without-rtlsdr        Disable rtlsdr support.
> 
> so a question arises for me, should we enable Smartcards -->
> https://github.com/OpenSC/OpenSC/wiki
> and also DVB dongles as entropy resources -->
> https://github.com/librtlsdr/librtlsdr
> for the rng-tools --> https://github.com/nhorman/rng-tools/releases in
> IPFire, whereby two new libs are needed ?
> 
> Best,
> 
> Erik
> 

Re: rng-tools PKCS#11 and rtlsdr

[ummeegge]

[-- Attachment #1: Type: text/plain, Size: 1103 bytes --]

Hi Michael,
alright will disable it then.

Best,

Erik

Am Dienstag, den 06.10.2020, 12:57 +0100 schrieb Michael Tremer:
> Hello Erik,
> 
> I would say that we can disable both things.
> 
> We do not encourage people to add any SDRs and we do not need any
> PKCS#11 support here either. rngd isn’t very useful at all any more,
> and we should not encourage people to feed arbitrary entropy into
> their pools.
> 
> -Michael
> 
> > On 5 Oct 2020, at 17:31, ummeegge <ummeegge(a)ipfire.org> wrote:
> > 
> > Hi all,
> > am currently updating the rng-tools and there are some new compile
> > options needed to compile it.
> > 
> >  --without-pkcs11        Disable pkcs11 support.
> >  --without-rtlsdr        Disable rtlsdr support.
> > 
> > so a question arises for me, should we enable Smartcards -->
> > https://github.com/OpenSC/OpenSC/wiki
> > and also DVB dongles as entropy resources -->
> > https://github.com/librtlsdr/librtlsdr
> > for the rng-tools --> https://github.com/nhorman/rng-tools/releases
> >  in
> > IPFire, whereby two new libs are needed ?
> > 
> > Best,
> > 
> > Erik
> > 
> 
>