Re: /dev/urandom uses uninit bytes, leaks user data

On Fri, Dec 21, 2007 at 11:10:36AM -0500, Andrew Lutomirski wrote:
> > > Step 1: Boot a system without a usable entropy source.
> > > Step 2: add some (predictable) "entropy" from userspace which isn't a
> > > multiple of 4, so up to three extra bytes get added.
> > > Step 3: Read a few bytes of /dev/random and send them over the network.
> >
> > Only root can do 1 and 2, at which point, it's already game over.
> 
> Again, no.  Root could do this accidentally.  Step 1 happens all the
> time (see the comments on non-unique UUIDs).  

Actually, it doesn't happen *all* the time.  That was a situation of
an rpm post-install script trying to use a random UUID generation
facility from a kick-start install where there was no keyboard
activity and apparently no other entropy added.  (Note that in such an
environment, generation of host ssh keys at install time without any
entropy is an even bigger problem, and that *is* something that people
should be thinking about.)

> Step 2 just requires a
> program to put data which it things is OK to go into the pool next to
> data that shouldn't be there in memory.  

Um, no, that's incorrect.  Simply putting data which is OK to put into
the pool next to data that shouldn't isn't enough.  First of all, the
issue is using unitialized kernel stack garbage.  Read that again,
slowly --- kernel stack.  How you arrange your data in user memory
doesn't matter.  Secondly, as I've said earlier, I'm not aware of any
program that actually tries to write into the entropy pool on most
modern Linux systems other than dd in /etc/init.d/random which
initializes the random pool from pre-seeded entropy on disk. 

    	       	    	 	    	    - Ted
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

---

• References:
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: Matt Mackall <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: Theodore Tso <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: John Reiser <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: Theodore Tso <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: John Reiser <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: Theodore Tso <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: Andy Lutomirski <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: "Andrew Lutomirski" <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: Phillip Susi <[email protected]>
  • Re: /dev/urandom uses uninit bytes, leaks user data
    • From: "Andrew Lutomirski" <[email protected]>

• Prev by Date: [PATCH 2/4] async_tx: kill tx_set_src and tx_set_dest methods
• Next by Date: Re: [PATCH] [RFC] be more verbose when probing EDD
• Previous by thread: Re: /dev/urandom uses uninit bytes, leaks user data
• Next by thread: Re: /dev/urandom uses uninit bytes, leaks user data
• Index(es):
  • Date
  • Thread

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]