<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<atom:link href="http://dev1galaxy.org/extern.php?action=feed&amp;tid=7595&amp;type=rss" rel="self" type="application/rss+xml" />
		<title><![CDATA[Dev1 Galaxy Forum / [SOLVED] Haveged and available entropy]]></title>
		<link>http://dev1galaxy.org/viewtopic.php?id=7595</link>
		<description><![CDATA[The most recent posts in [SOLVED] Haveged and available entropy.]]></description>
		<lastBuildDate>Fri, 21 Nov 2025 20:25:50 +0000</lastBuildDate>
		<generator>FluxBB</generator>
		<item>
			<title><![CDATA[Re: [SOLVED] Haveged and available entropy]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=59950#p59950</link>
			<description><![CDATA[<p>Hello:</p><div class="quotebox"><cite>GNUser wrote:</cite><blockquote><div><p>... part of the linux kernel since version 5.4, making haveged largely obsolete.</p></div></blockquote></div><p>Yes, I came across that after posting my question.</p><div class="quotebox"><cite>GNUser wrote:</cite><blockquote><div><p>... few situations in which the haveged service may be useful ...</p></div></blockquote></div><p>Yes, <a href="https://github.com/jirka-h/haveged/issues/57#issuecomment-1054795736" rel="nofollow">here</a> the author makes a case of sorts:</p><div class="quotebox"><cite>jirka-h wrote:</cite><blockquote><div><p>... it&#039;s still useful. It can provide entropy early in the boot when /dev/random is not fully utilized.<br />On a fully booted system, it can be still used as an additional entropy source. It will insert entropy into the kernel every 60 seconds, thus diversifying your entropy sources.</p></div></blockquote></div><p>The &quot;<em> ... diversifying your entropy sources.</em>&quot; bit sounds good. Might as well keep it running.</p><div class="quotebox"><cite>g4sra wrote:</cite><blockquote><div><p>... for real randomness security use a Pi, not your £2K workstation.</p></div></blockquote></div><p>Indeed ... 8^D<br />I could have never paid £2K for a workstation but I am quite sure that you are right, a Pi would work great.<br />That said, I think that what I need (like most desktop users) is the best randomness <em>available</em> without much ado or expense.</p><p>Can&#039;t find the post now, but it seems that <span class="bbc">haveged</span> is not at all expensive to run so my guess is that between the kernel and the <span class="bbc">haveged</span> service running, I may be properly covered, at least <em>randomness-wise</em>.<br />Time will tell.</p><p>Thank you both for your input.<br />Much obliged.</p><p>Best,</p><p>A.</p>]]></description>
			<author><![CDATA[dummy@example.com (Altoid)]]></author>
			<pubDate>Fri, 21 Nov 2025 20:25:50 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=59950#p59950</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Haveged and available entropy]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=59942#p59942</link>
			<description><![CDATA[<p>I have removed haveged from several Devuan systems with no ill effects.<br />Haveged was made&#160; default in the Debian Distro to overcome performance issues after a change to systemd using random to create unique ids.<br />There was a bug report somewhere if anybody cares to follow up and search for it, of course systemd was not at any point at fault.<br />Despite having restricted resources (cpu,memory) havaged was even carried forward onto the Raspberry Pi which has a &#039;real&#039; number generator and therefore can never run out of random numbers.</p><p>NB. for real randomness security use a Pi, not your £2K workstation.</p>]]></description>
			<author><![CDATA[dummy@example.com (g4sra)]]></author>
			<pubDate>Fri, 21 Nov 2025 18:27:59 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=59942#p59942</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Haveged and available entropy]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=59941#p59941</link>
			<description><![CDATA[<p>A haveged-inspired, entropy-generating algorithm has been part of the linux kernel since version 5.4, making haveged largely obsolete. There are only a few situations in which the haveged service may be useful, which are listed in the first link below.</p><p>References:<br /><a href="https://github.com/jirka-h/haveged/blob/master/README.md" rel="nofollow">https://github.com/jirka-h/haveged/blob … /README.md</a><br /><a href="https://dev1galaxy.org/viewtopic.php?pid=48879#p48879" rel="nofollow">https://dev1galaxy.org/viewtopic.php?pid=48879#p48879</a></p>]]></description>
			<author><![CDATA[dummy@example.com (GNUser)]]></author>
			<pubDate>Fri, 21 Nov 2025 17:20:55 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=59941#p59941</guid>
		</item>
		<item>
			<title><![CDATA[[SOLVED] Haveged and available entropy]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=59936#p59936</link>
			<description><![CDATA[<p>Hello:</p><p><span class="bbu">Disclaimer:</span><br />Reason for asking =&#160; a good deal (if not all) of this is over my head. </p><p>Not being sure about what to do about Excalibur, I have been having a look at various things related to security.<br />Yesterday I remembered <span class="bbc">haveged</span>, checked that it was running and, recalling that I had set it a few years ago, checked the available entropy.</p><p>Turns out that it returned a value of 256.</p><p>But I recalled having changed it to a higher value (1024?) as suggested in various web pages.<br />A look at <span class="bbc">/etc/default/haveged</span> revealed the present setting:</p><div class="codebox"><pre><code>$ cat /etc/default/haveged
# Configuration file for haveged

# Options to pass to haveged:
# DAEMON_ARGS=&quot; &quot;
$ </code></pre></div><p>I checked the <span class="bbc">haveged</span> service was running and the available entropy setting and poolsize:</p><div class="codebox"><pre><code>$ cat /proc/sys/kernel/random/entropy_avail
256
$</code></pre></div><div class="codebox"><pre><code>$ cat /proc/sys/kernel/random/poolsize
256
$ </code></pre></div><p>But that was not what I recalled having set as per the recommendations at that time. <br />So I looked up web pages I had bookmarked and edited the file, uncommenting the setting and editing it to what I remembered (?).</p><div class="codebox"><pre><code>$ cat /etc/default/haveged
# Configuration file for haveged

# Options to pass to haveged:
DAEMON_ARGS=&quot;-w 1024&quot;
$ </code></pre></div><p>That would give me a value over 1000 which was the accepted minimum value at the time I set it up. </p><p>Then I stopped / restarted the service, checked that it was running and the available entropy setting and poolsize:</p><div class="codebox"><pre><code>$ cat /proc/sys/kernel/random/entropy_avail
256
$</code></pre></div><div class="codebox"><pre><code>$ cat /proc/sys/kernel/random/poolsize
256
$ </code></pre></div><p>What was going on?</p><p>TL;DR<br />I seems that as of kernel <span class="bbc">5.10.119</span>, the value of 256 bytes has been hardcoded.<br />See this link:<br /><a href="https://unix.stackexchange.com/questions/704737" rel="nofollow">https://unix.stackexchange.com/questions/704737</a></p><div class="quotebox"><blockquote><div><p>TL;DR:<br />As long as your computer doesn&#039;t suffer from not enough entropy ever, you&#039;re generating secure numbers.<br />Even just 256 entropy once before starting to get random numbers, and then 0 for the rest of the lifetime of your system would be OK!<br />Having 256 at any time is way more than ever necessary.</p></div></blockquote></div><p>Right ...<br />Like I said at the start of this post, all this is over my head, reason why I am asking about it.</p><p>I <span class="bbu">do</span> know that entropy is important, more in servers that desktops, but <em>still</em> important.<br />The &quot;<em>As long as your computer doesn&#039;t ... </em>&quot; bit does not mean much to me, more so in the context of all that is going on with Linux these past few years.</p><p>And yes, the&#160; &quot;<em>... 256 at any time is way more than ever necessary.</em>&quot; bit <span class="bbu">did</span> bring a smile to my face.</p><p>That said, I&#039;d appreciate the opinion of those members who actually understand / have a grip on this stuff.</p><p>Best,</p><p>A.</p>]]></description>
			<author><![CDATA[dummy@example.com (Altoid)]]></author>
			<pubDate>Fri, 21 Nov 2025 15:13:37 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=59936#p59936</guid>
		</item>
	</channel>
</rss>
