Skip to content

Outdated entropy value in cryptography article #209

@PedroCortx

Description

@PedroCortx

What is Entropy in Cryptography? ends with this paragraph:

A Linux machine that has sufficient entropy in its pool will usually contain 4096 bits of randomness. This is more than enough for several secure calculations to be performed. For perspective, a very strong private key typically contains 256 bits of entropy. If you want to see how much entropy your Linux machine currently has available, you can use the following command:
cat /proc/sys/kernel/random/entropy_avail

This makes the reader think the output for this command would be something close to 4096. But running this command after kernel update 5.10.119 will result in 256. Both entropy_avail and poolsize are capped at 256. This could cause confusion or worry, specially for beginners.
It would be good to update the paragraph with a more detailed explanation, maybe with a little history in it ("it used to be 4096 but that changed because...")
This article is quoted in a lesson ( I think it's in Learn Git, IIRC), so it would be good to be accurate for learning purposes.

https://unix.stackexchange.com/questions/704737/kernel-5-10-119-caused-the-values-of-proc-sys-kernel-random-entropy-avail-and-p

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/diff/drivers/char/random.c?id=v5.10.119&id2=v5.10.118

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions