[PATCH] get_random_bytes returns the same on every boot

From: Balint Marton
Date: Thu Jul 22 2004 - 17:53:58 EST


At boot time, get_random_bytes always returns the same random data, as if
there were a constant random seed. For example, if I use the kernel level
ip autoconfiguration with dhcp, the kernel will create a dhcp request
packet with always the same transaction ID. (If you have more than one
computers, and they are booting at the same time, then this is a big

That happens, because only the primary entropy pool is initialized with
the system time, in function rand_initialize. The secondary pool is only
cleared. In this early stage of booting, there is usually no user
interaction, or usable disk interrupts, so the kernel can't add any real
random bytes to the primary pool. And altough the system time is in the
primary pool, the kernel does not consider it real random data, so you
can't read from the primary pool, before at least a part of it will be
filled with some real randomness (interrupt timing).
Therefore all random data will come from the secondary pool, and the
kernel cannot reseed the secondary pool, because there is no real
randomness in the primary one.

The solution is simple: Initialize not just the primary, but also the
secondary pool with the system time. My patch worked for me with
2.6.8-rc2, but it was not tested too long.

--- linux-2.6.8-rc2.orig/drivers/char/random.c 2004-06-16 07:18:57.000000000 +0200
+++ linux-2.6.8-rc2/drivers/char/random.c 2004-07-22 21:06:28.000000000 +0200
@@ -1537,6 +1537,7 @@
+ init_std_data(sec_random_state);

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/