2019: `gpg --gen-key` still shows this
9
14
55
Conversation
This Tweet was deleted by the Tweet author. Learn more
Using haveged isn't a good recommendation. Software using either /dev/random or /dev/urandom should be fixed as both are faulty APIs. It shouldn't be worked around by using a questionable entropy generation service. The kernel is cautious about crediting entropy for good reason.
1
1
HAVEGE has a very sketchy mechanism for generating entropy heavily based on the assumption that Intel CPU cache mechanics are very non-deterministic, complex and not observable by other processes. Fix the broken software using the nonsensical Linux-specific faulty API instead.
Other OSes aren't stupid enough to include that poorly designed API and don't experience this problem. It's really time for the Linux world to move on from a bunch of cargo cult nonsense about randomness and switch to using real threat models and analysis / rational thinking.