insufficient entropy for rnd

Rumi Szabolcs <[email protected]>
Newsgroups gmane.os.netbsd.devel.crypto
Message-ID <[email protected]>
Hello!

I've got a server running NetBSD/i386 which is getting a
relatively low load. I'm running sendmail on it using SMTP
authentication via Cyrus SASL, which seems to use /dev/random.
When a mail gets relayed in such an authenticated manner,
sendmail often drops the connection with a timeout during
the authentication process which I believe is due to insufficient
randomness coming out of /dev/random so that read is blocking
so long that the SMTP connection gets timed out. When I make
a "find / -name blahblah" that puts some load on the filesystem
so that more entropy is gathered by rnd, this instantly revives
sendmail and the authentication succeeds...

Maybe Cyrus SASL (mine is 2.1.12 from pkgsrc) could be compiled
to use /dev/urandom instead, but for me this sounds more like
a workaround than a solution at least for a crypto purpose.
Wouldn't it be better to figure out more entropy sources
for a better feed of rnd? I also wonder how big the entropy
gathering pool is and how long it "caches" the entropy
that has been gathered.

Regards,
Szabolcs Rumi
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.