[libre-riscv-dev] [Bug 309] New: investigate OpenTITAN

[libre-riscv-dev] [Bug 309] New: investigate OpenTITAN

[bugzilla-daemon]

https://bugs.libre-soc.org/show_bug.cgi?id=309

            Bug ID: 309
           Summary: investigate OpenTITAN
           Product: Libre-SOC's first SoC
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: CONFIRMED
          Severity: enhancement
          Priority: ---
         Component: Source Code
          Assignee: lkcl@lkcl.net
          Reporter: lkcl@lkcl.net
                CC: libre-riscv-dev@lists.libre-riscv.org
   NLnet milestone: ---

http://opentitan.org

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 309] investigate OpenTITAN

[bugzilla-daemon]

https://bugs.libre-soc.org/show_bug.cgi?id=309

Jacob Lifshay <programmerjake@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |programmerjake@gmail.com

--- Comment #1 from Jacob Lifshay <programmerjake@gmail.com> ---
The entropy source they currently have is a placeholder LFSR source, which is
well known to be insecure.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 309] investigate OpenTITAN

[bugzilla-daemon]

https://bugs.libre-soc.org/show_bug.cgi?id=309

--- Comment #2 from Jacob Lifshay <programmerjake@gmail.com> ---
If we can get away with using a few op-amps, I quite like the infinite noise HW
entropy source:
https://github.com/waywardgeek/infnoise

See also:
https://github.com/alwynallan/redoubler

I've built a similar circuit on a breadboard before and it works quite well,
though didn't test the entropy quality since I didn't connect it to a computer.

It has the nice features of not being finicky (unlike quite a lot of other
entropy sources) as well as not breaking down when there is a lot of
environmental noise (perhaps from an attacker).

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 309] investigate OpenTITAN

[bugzilla-daemon]

https://bugs.libre-soc.org/show_bug.cgi?id=309

--- Comment #3 from Luke Kenneth Casson Leighton <lkcl@lkcl.net> ---
interesting, i think my friend phil has used something like this, for a better
source than /dev/random, for GPG and VPN usage.  i've designed cryptographic
algorithms so know how to test them to make sure they're indistinguishable
from white noise (dieharder, CSRC's STS)

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev