55 messages in org.freebsd.freebsd-currentRe: entropy reseeding is totally broken | From | Sent On | Attachments |
|---|---|---|
| Андрей Чернов | Oct 19, 2000 9:48 pm | |
| Udo Schweigert | Oct 19, 2000 10:57 pm | |
| Андрей Чернов | Oct 19, 2000 11:39 pm | |
| Андрей Чернов | Oct 19, 2000 11:51 pm | |
| Doug Barton | Oct 20, 2000 1:18 am | |
| Андрей Чернов | Oct 20, 2000 9:27 am | |
| Андрей Чернов | Oct 20, 2000 9:43 am | |
| Mark Murray | Oct 20, 2000 10:06 am | |
| Андрей Чернов | Oct 20, 2000 1:13 pm | |
| Warner Losh | Oct 24, 2000 11:15 am | |
| Terry Lambert | Oct 25, 2000 3:35 am | |
| Андрей Чернов | Oct 25, 2000 3:50 am | |
| Mark Murray | Oct 25, 2000 10:37 am | |
| Андрей Чернов | Oct 25, 2000 11:12 am | |
| Wesley Morgan | Oct 25, 2000 2:15 pm | |
| Mark Murray | Oct 25, 2000 3:12 pm | |
| John W. De Boskey | Oct 25, 2000 4:20 pm | |
| Wesley Morgan | Oct 25, 2000 4:50 pm | |
| Mark Murray | Oct 25, 2000 5:01 pm | |
| Doug Barton | Oct 25, 2000 9:28 pm | |
| Ed Hall | Oct 26, 2000 12:30 am | |
| David O'Brien | Oct 26, 2000 12:50 am | |
| Андрей Чернов | Oct 26, 2000 1:47 am | |
| Kris Kennaway | Oct 26, 2000 2:17 am | |
| Kris Kennaway | Oct 26, 2000 2:21 am | |
| Андрей Чернов | Oct 26, 2000 2:54 am | |
| Андрей Чернов | Oct 26, 2000 3:01 am | |
| Rod Taylor | Oct 26, 2000 3:30 am | |
| Андрей Чернов | Oct 26, 2000 3:34 am | |
| Jordan Hubbard | Oct 26, 2000 5:20 am | |
| John W. De Boskey | Oct 26, 2000 6:24 am | |
| Matt Dillon | Oct 26, 2000 9:55 am | |
| Mark Murray | Oct 26, 2000 10:06 am | |
| Mark Murray | Oct 26, 2000 10:17 am | |
| John Baldwin | Oct 26, 2000 11:06 am | |
| Андрей Чернов | Oct 26, 2000 11:36 am | |
| Terry Lambert | Oct 26, 2000 12:04 pm | |
| Mark Murray | Oct 26, 2000 12:39 pm | |
| Doug Barton | Oct 26, 2000 12:49 pm | |
| David O'Brien | Oct 26, 2000 1:26 pm | |
| Mark Murray | Oct 26, 2000 1:29 pm | |
| Matt Dillon | Oct 26, 2000 1:47 pm | |
| Mark Murray | Oct 26, 2000 2:02 pm | |
| Ed Hall | Oct 26, 2000 2:03 pm | |
| Matt Dillon | Oct 26, 2000 2:25 pm | |
| Doug Barton | Oct 26, 2000 2:44 pm | |
| Poul-Henning Kamp | Oct 26, 2000 2:51 pm | |
| Wesley Morgan | Oct 26, 2000 3:07 pm | |
| David O'Brien | Oct 26, 2000 3:15 pm | |
| Poul-Henning Kamp | Oct 26, 2000 3:18 pm | |
| Jim Bryant | Oct 26, 2000 3:29 pm | |
| Mark Murray | Oct 26, 2000 3:56 pm | |
| Doug Barton | Oct 26, 2000 9:00 pm | |
| Terry Lambert | Oct 27, 2000 5:19 pm | |
| Doug Barton | Oct 27, 2000 7:18 pm |
| Subject: | Re: entropy reseeding is totally broken | |
|---|---|---|
| From: | Poul-Henning Kamp (ph...@critter.freebsd.dk) | |
| Date: | Oct 26, 2000 3:18:01 pm | |
| List: | org.freebsd.freebsd-current | |
In message <Pine.BSF.4.21.0010261757580.6460-100000@volatile.chemicals.tacorp.c om>, Wesley Morgan writes:
On Thu, 26 Oct 2000, Poul-Henning Kamp wrote:
I don't really care that much how good my random bits are right after boot, but I do care about my machine coming up quickly.
I don't know about that, look at your boot logs:
Oct 26 17:32:19 catalyst /boot/kernel/kernel: Copyright (c) 1992-2000 The
FreeBSD Project.
Oct 26 17:32:19 catalyst /boot/kernel/kernel: Copyright (c) 1979, 1980, 1983,
1986, 1988, 1989, 1991, 1992, 1993, 1994
Oct 26 17:32:23 catalyst sshd[193]: Generating 768 bit RSA key.
Oct 26 17:32:23 catalyst sshd[193]: RSA key generation complete.
Those times aren't correct I'm sure, but if I can't get enough entropy for a 768 bit key _very soon_ after boot, we could have a problem.
Somehow, I think everyone should care about that.
You know, I think this thing is being blown out of proportion.
WAY out of proportion.
Yes, there are systems which the administrator will want to set to ultra_paranoid=YESDAMNIT!
but for all the machines I have behind firewalls I would like to have act_like_a_normal_unix_and_boot_in_finite_time=YESPLEASE
-- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 ph...@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence.
To Unsubscribe: send mail to majo...@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message