X-Git-Url: http://info9.net/gitweb/?p=wiki.git;a=blobdiff_plain;f=tmarble%2Fposts%2FUSB_TRNG.mdwm;h=cf5495cf1efc8954cf71b7c24661dbad42a68fcf;hp=0000000000000000000000000000000000000000;hb=8087ead76ee261db81da9354392adfab85fd71b2;hpb=1fdf705b5f3264e08f298b5f20b5df4de66ee3e1;ds=inline diff --git a/tmarble/posts/USB_TRNG.mdwm b/tmarble/posts/USB_TRNG.mdwm new file mode 100644 index 0000000..cf5495c --- /dev/null +++ b/tmarble/posts/USB_TRNG.mdwm @@ -0,0 +1,51 @@ +# USB TRNG + +Yesterday I had a blast presenting my talk +[Security not by chance: the AltusMetrum hardware true random number generator][usbtrng-dc14] at [DebConf14][dc14]. + + +DebConf 14 + + +[USB TRNG][usbtrng] is a collaborative effort with [AltusMetrum][altusmetrum] +to create a completely open hardware and Free software true +random number generator. + +I my talk I mention the rationale for gathering more entropy: +The Linux urandom boot-time entropy hole as described in +the paper +[Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices][ehole]. + +I also mention some of the difficulty in assessing RNG +quality for security applications as highlighted by +Matthew Green in his blog post +[How do you know if an RNG is working?][greenrng]. + +I've been lucky to work on this design with [Bdale Garbee][bdale] +and [Keith Packard][keithp]. + +If you'd like to learn more you can... +* Download the presentation (see below) +* Check out the web page for [USB TRNG][usbtrng] +* Join us on IRC OFTC #altusmetrum +* Join the [trng mailing list][trng] + +Let [[me|/tmarble]] know if you'd like to get involved! + +## links + +* Presentation as PDF: [[usbtrng.pdf|usbtrng.pdf]] +* Presentation video: Soon to be uploaded by the amazing [Debian Video Team][debvideo]. + +[usbtrng-dc14]: https://summit.debconf.org/debconf14/meeting/20/security-not-by-chance-the-altusmetrum-hardware-true-random-number-generator/ +[dc14]: http://debconf14.debconf.org/ +[altusmetrum]: http://altusmetrum.org/ +[bdale]: http://gag.com/bdale +[keithp]: http://keithp.com/keithp +[trng]: http://lists.gag.com/mailman/listinfo/trng +[usbtrng]: http://lists.gag.com/mailman/listinfo/trng +[debvideo]: https://wiki.debconf.org/wiki/DebConf14/Videostream#Recordings +[ehole]: https://factorable.net/weakkeys12.extended.pdf +[greenrng]: http://blog.cryptographyengineering.com/2014/03/how-do-you-know-if-rng-is-working.html + +[[!tag debian debconf altusmetrum security]]