atom feed55 messages in org.freebsd.freebsd-currentRe: entropy reseeding is totally broken
FromSent OnAttachments
Андрей ЧерновOct 19, 2000 9:48 pm 
Udo SchweigertOct 19, 2000 10:57 pm 
Андрей ЧерновOct 19, 2000 11:39 pm 
Андрей ЧерновOct 19, 2000 11:51 pm 
Doug BartonOct 20, 2000 1:18 am 
Андрей ЧерновOct 20, 2000 9:27 am 
Андрей ЧерновOct 20, 2000 9:43 am 
Mark MurrayOct 20, 2000 10:06 am 
Андрей ЧерновOct 20, 2000 1:13 pm 
Warner LoshOct 24, 2000 11:15 am 
Terry LambertOct 25, 2000 3:35 am 
Андрей ЧерновOct 25, 2000 3:50 am 
Mark MurrayOct 25, 2000 10:37 am 
Андрей ЧерновOct 25, 2000 11:12 am 
Wesley MorganOct 25, 2000 2:15 pm 
Mark MurrayOct 25, 2000 3:12 pm 
John W. De BoskeyOct 25, 2000 4:20 pm 
Wesley MorganOct 25, 2000 4:50 pm 
Mark MurrayOct 25, 2000 5:01 pm 
Doug BartonOct 25, 2000 9:28 pm 
Ed HallOct 26, 2000 12:30 am 
David O'BrienOct 26, 2000 12:50 am 
Андрей ЧерновOct 26, 2000 1:47 am 
Kris KennawayOct 26, 2000 2:17 am 
Kris KennawayOct 26, 2000 2:21 am 
Андрей ЧерновOct 26, 2000 2:54 am 
Андрей ЧерновOct 26, 2000 3:01 am 
Rod TaylorOct 26, 2000 3:30 am 
Андрей ЧерновOct 26, 2000 3:34 am 
Jordan HubbardOct 26, 2000 5:20 am 
John W. De BoskeyOct 26, 2000 6:24 am 
Matt DillonOct 26, 2000 9:55 am 
Mark MurrayOct 26, 2000 10:06 am 
Mark MurrayOct 26, 2000 10:17 am 
John BaldwinOct 26, 2000 11:06 am 
Андрей ЧерновOct 26, 2000 11:36 am 
Terry LambertOct 26, 2000 12:04 pm 
Mark MurrayOct 26, 2000 12:39 pm 
Doug BartonOct 26, 2000 12:49 pm 
David O'BrienOct 26, 2000 1:26 pm 
Mark MurrayOct 26, 2000 1:29 pm 
Matt DillonOct 26, 2000 1:47 pm 
Mark MurrayOct 26, 2000 2:02 pm 
Ed HallOct 26, 2000 2:03 pm 
Matt DillonOct 26, 2000 2:25 pm 
Doug BartonOct 26, 2000 2:44 pm 
Poul-Henning KampOct 26, 2000 2:51 pm 
Wesley MorganOct 26, 2000 3:07 pm 
David O'BrienOct 26, 2000 3:15 pm 
Poul-Henning KampOct 26, 2000 3:18 pm 
Jim BryantOct 26, 2000 3:29 pm 
Mark MurrayOct 26, 2000 3:56 pm 
Doug BartonOct 26, 2000 9:00 pm 
Terry LambertOct 27, 2000 5:19 pm 
Doug BartonOct 27, 2000 7:18 pm 
Subject:Re: entropy reseeding is totally broken
From:John Baldwin (jh@FreeBSD.org)
Date:Oct 26, 2000 11:06:12 am
List:org.freebsd.freebsd-current

On 26-Oct-00 Rod Taylor wrote:

Doug Barton wrote:

Wesley Morgan wrote:

I'm not knocking anyone or any code, especially considering this IS -current... BUT... I don't need to read the code to know that I am seeing the same fortunes on first login after reboot more often than I can attribute to random chance. Maybe nanotime is being harvested, but it seems that there is a time lag between system startup and reaching a state of "true pseudo-entropy". Also, every reboot has entropy caching failing to work. I don't know if this is a product of the broken reseeding or what, because the /etc/rc files seem to be fine.

How exactly are you rebooting? If you're using the 'reboot' command, that explains why entropy reseeding is not working. As has been discussed several times on -current, you only run rc.shutdown if you use another method, like 'shutdown -r now', 'init 6', or even the trust three-finger salute.

How about when I hit the reset button? That case SHOULD be taken care of too! Would it not be possible to sample /dev/random to store the entropy every hour or so that the system runs? Atleast that way you would be guarenteed to have something.

And if a malicious user on your machine grabs the saved entropy file and then reboots your machine using some exploit of some sort? Granted neither of these tasks may be easy, and it could be done in such a way that the first requires root access.

--

John Baldwin <jh@FreeBSD.org> -- http://www.FreeBSD.org/~jhb/ PGP Key: http://www.baldwin.cx/~john/pgpkey.asc "Power Users Use the Power to Serve!" - http://www.FreeBSD.org/

To Unsubscribe: send mail to majo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message