2019: `gpg --gen-key` still shows this
9
14
55
Conversation
This Tweet was deleted by the Tweet author. Learn more
Using haveged isn't a good recommendation. Software using either /dev/random or /dev/urandom should be fixed as both are faulty APIs. It shouldn't be worked around by using a questionable entropy generation service. The kernel is cautious about crediting entropy for good reason.
1
1
HAVEGE has a very sketchy mechanism for generating entropy heavily based on the assumption that Intel CPU cache mechanics are very non-deterministic, complex and not observable by other processes. Fix the broken software using the nonsensical Linux-specific faulty API instead.
1
Other OSes aren't stupid enough to include that poorly designed API and don't experience this problem. It's really time for the Linux world to move on from a bunch of cargo cult nonsense about randomness and switch to using real threat models and analysis / rational thinking.