you are viewing a single comment's thread
view the rest of the comments
[–] 16 points 3 years ago (2 children)

"Maybe use it for the boot-time 'gather entropy from different sources,' but clearly it should not be used at runtime."

Good idea. Ask it during boot/insmod for some hardware-random bits to seed Linux's usual software-only CSPRNG, then just use that.

And even that might not be a great idea. I wouldn't be surprised if the fTPM RNG is subtly not-entirely-random, at some alphabet agency's behest. I remember there being a controversy over rdrand for this reason…

  • source
  • hideshow 4 child comments
  • [–] 1 point 3 years ago (1 child)

    Well, it's an fTPM, aka software, and AFAIK, no software can truly have a random RNG.

    So it might be very good pseudo random at best.

  • source
  • parent
  • hideshow 2 child comments