Botched RNG in Intel processors, a threat to key creation?

Ok, here's my suggestion, use a Raspberry Pi. It's designed by a european foundation. (Ignoring the SOC is designed by BroadCom of Irvine, CA, or Linux kernel maintainer is in Portland, Oregon, this is still a good answer.

First install rng-tools

sudo apt-get install rng-tools
sudo modprobe bcm2708-rng
sudo echo "bcm2708_rng" >> /etc/modules
sudo vi /etc/default/rng-tools 
HRNGDEVICE=/dev/hwrng
RNGDOPTIONS="--fill-watermark=90% --feed-interval=1"

Second Configure init script to persist entropy across restarts

sudo vi /etc/init.d/random
SEE CODE BELOW adapted from linux random.c
sudo chmod +x /etc/init.d/random
sudo update-rc.d /etc/init.d/random defaults

On Redhat type linux: chkconfig --add random

Code to put in /etc/init.d/random

#!/bin/bash
# /etc/init.d/random

### BEGIN INIT INFO
# Provides:          random
# Required-Start:    $remote_fs $syslog
# Required-Stop:     $remote_fs $syslog
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: based on random.c
# Description:       Ensuring unpredictability at system startup from random.c
### END INIT INFO


case "$1" in 
    start)
        echo "Initializing random number generator..."
        random_seed=/var/run/random-seed
        # Carry a random seed from start-up to start-up
        # Load and then save the whole entropy pool
        if [ -f $random_seed ]; then
            cat $random_seed >/dev/urandom
        else
            touch $random_seed
        fi
        chmod 600 $random_seed
        dd if=/dev/urandom of=$random_seed count=1 bs=512
        ;;
    stop)
        # Carry a random seed from shut-down to start-up
        # Save the whole entropy pool
        echo "Saving random seed..."
        random_seed=/var/run/random-seed
        touch $random_seed
        chmod 600 $random_seed
        dd if=/dev/urandom of=$random_seed count=1 bs=512
        ;;
    *)
        echo "Usage: /etc/init.d/random start|stop"
        exit 1
        ;;
esac

exit 0
/r/crypto Thread