atom feed55 messages in org.freebsd.freebsd-currentRe: entropy reseeding is totally broken
FromSent OnAttachments
Андрей ЧерновOct 19, 2000 9:48 pm 
Udo SchweigertOct 19, 2000 10:57 pm 
Андрей ЧерновOct 19, 2000 11:39 pm 
Андрей ЧерновOct 19, 2000 11:51 pm 
Doug BartonOct 20, 2000 1:18 am 
Андрей ЧерновOct 20, 2000 9:27 am 
Андрей ЧерновOct 20, 2000 9:43 am 
Mark MurrayOct 20, 2000 10:06 am 
Андрей ЧерновOct 20, 2000 1:13 pm 
Warner LoshOct 24, 2000 11:15 am 
Terry LambertOct 25, 2000 3:35 am 
Андрей ЧерновOct 25, 2000 3:50 am 
Mark MurrayOct 25, 2000 10:37 am 
Андрей ЧерновOct 25, 2000 11:12 am 
Wesley MorganOct 25, 2000 2:15 pm 
Mark MurrayOct 25, 2000 3:12 pm 
John W. De BoskeyOct 25, 2000 4:20 pm 
Wesley MorganOct 25, 2000 4:50 pm 
Mark MurrayOct 25, 2000 5:01 pm 
Doug BartonOct 25, 2000 9:28 pm 
Ed HallOct 26, 2000 12:30 am 
David O'BrienOct 26, 2000 12:50 am 
Андрей ЧерновOct 26, 2000 1:47 am 
Kris KennawayOct 26, 2000 2:17 am 
Kris KennawayOct 26, 2000 2:21 am 
Андрей ЧерновOct 26, 2000 2:54 am 
Андрей ЧерновOct 26, 2000 3:01 am 
Rod TaylorOct 26, 2000 3:30 am 
Андрей ЧерновOct 26, 2000 3:34 am 
Jordan HubbardOct 26, 2000 5:20 am 
John W. De BoskeyOct 26, 2000 6:24 am 
Matt DillonOct 26, 2000 9:55 am 
Mark MurrayOct 26, 2000 10:06 am 
Mark MurrayOct 26, 2000 10:17 am 
John BaldwinOct 26, 2000 11:06 am 
Андрей ЧерновOct 26, 2000 11:36 am 
Terry LambertOct 26, 2000 12:04 pm 
Mark MurrayOct 26, 2000 12:39 pm 
Doug BartonOct 26, 2000 12:49 pm 
David O'BrienOct 26, 2000 1:26 pm 
Mark MurrayOct 26, 2000 1:29 pm 
Matt DillonOct 26, 2000 1:47 pm 
Mark MurrayOct 26, 2000 2:02 pm 
Ed HallOct 26, 2000 2:03 pm 
Matt DillonOct 26, 2000 2:25 pm 
Doug BartonOct 26, 2000 2:44 pm 
Poul-Henning KampOct 26, 2000 2:51 pm 
Wesley MorganOct 26, 2000 3:07 pm 
David O'BrienOct 26, 2000 3:15 pm 
Poul-Henning KampOct 26, 2000 3:18 pm 
Jim BryantOct 26, 2000 3:29 pm 
Mark MurrayOct 26, 2000 3:56 pm 
Doug BartonOct 26, 2000 9:00 pm 
Terry LambertOct 27, 2000 5:19 pm 
Doug BartonOct 27, 2000 7:18 pm 
Subject:Re: entropy reseeding is totally broken
From:Poul-Henning Kamp (ph@critter.freebsd.dk)
Date:Oct 26, 2000 2:51:41 pm
List:org.freebsd.freebsd-current

In message <Pine@dt051n37.san.rr.com>, Doug Barton writes:

On Thu, 26 Oct 2000, Ed Hall wrote:

How about skipping the "long, annoying failover process" altogether and simply logging to the console that the entropy reseeding process was incomplete? Forcing an indeterminate delay to gather entropy is more than a little paternalistic.

The problem is, it's going to block somewhere. If we don't "block" while creating the entropy, the first thing that needs random bits is going to block for real because /dev/random isn't going to have anything to feed it.

We must come up with an entropy reseeding mechanism that has a reasonably high degree of success for a reasonably high number of cases.

I think the strategy here is to feed it as much as we can from the kernel during device-probe/attach as possible.

I don't really care that much how good my random bits are right after boot, but I do care about my machine coming up quickly.

Add a /etc/rc.conf knob which says

wait_until_entropy_collected=YES

which people who care a lot about randomness can set.

To Unsubscribe: send mail to majo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message