55 messages in org.freebsd.freebsd-currentRe: entropy reseeding is totally broken| From | Sent On | Attachments |
|---|---|---|
| Андрей Чернов | Oct 19, 2000 9:48 pm | |
| Udo Schweigert | Oct 19, 2000 10:57 pm | |
| Андрей Чернов | Oct 19, 2000 11:39 pm | |
| Андрей Чернов | Oct 19, 2000 11:51 pm | |
| Doug Barton | Oct 20, 2000 1:18 am | |
| Андрей Чернов | Oct 20, 2000 9:27 am | |
| Андрей Чернов | Oct 20, 2000 9:43 am | |
| Mark Murray | Oct 20, 2000 10:06 am | |
| Андрей Чернов | Oct 20, 2000 1:13 pm | |
| Warner Losh | Oct 24, 2000 11:15 am | |
| Terry Lambert | Oct 25, 2000 3:35 am | |
| Андрей Чернов | Oct 25, 2000 3:50 am | |
| Mark Murray | Oct 25, 2000 10:37 am | |
| Андрей Чернов | Oct 25, 2000 11:12 am | |
| Wesley Morgan | Oct 25, 2000 2:15 pm | |
| Mark Murray | Oct 25, 2000 3:12 pm | |
| John W. De Boskey | Oct 25, 2000 4:20 pm | |
| Wesley Morgan | Oct 25, 2000 4:50 pm | |
| Mark Murray | Oct 25, 2000 5:01 pm | |
| Doug Barton | Oct 25, 2000 9:28 pm | |
| Ed Hall | Oct 26, 2000 12:30 am | |
| David O'Brien | Oct 26, 2000 12:50 am | |
| Андрей Чернов | Oct 26, 2000 1:47 am | |
| Kris Kennaway | Oct 26, 2000 2:17 am | |
| Kris Kennaway | Oct 26, 2000 2:21 am | |
| Андрей Чернов | Oct 26, 2000 2:54 am | |
| Андрей Чернов | Oct 26, 2000 3:01 am | |
| Rod Taylor | Oct 26, 2000 3:30 am | |
| Андрей Чернов | Oct 26, 2000 3:34 am | |
| Jordan Hubbard | Oct 26, 2000 5:20 am | |
| John W. De Boskey | Oct 26, 2000 6:24 am | |
| Matt Dillon | Oct 26, 2000 9:55 am | |
| Mark Murray | Oct 26, 2000 10:06 am | |
| Mark Murray | Oct 26, 2000 10:17 am | |
| John Baldwin | Oct 26, 2000 11:06 am | |
| Андрей Чернов | Oct 26, 2000 11:36 am | |
| Terry Lambert | Oct 26, 2000 12:04 pm | |
| Mark Murray | Oct 26, 2000 12:39 pm | |
| Doug Barton | Oct 26, 2000 12:49 pm | |
| David O'Brien | Oct 26, 2000 1:26 pm | |
| Mark Murray | Oct 26, 2000 1:29 pm | |
| Matt Dillon | Oct 26, 2000 1:47 pm | |
| Mark Murray | Oct 26, 2000 2:02 pm | |
| Ed Hall | Oct 26, 2000 2:03 pm | |
| Matt Dillon | Oct 26, 2000 2:25 pm | |
| Doug Barton | Oct 26, 2000 2:44 pm | |
| Poul-Henning Kamp | Oct 26, 2000 2:51 pm | |
| Wesley Morgan | Oct 26, 2000 3:07 pm | |
| David O'Brien | Oct 26, 2000 3:15 pm | |
| Poul-Henning Kamp | Oct 26, 2000 3:18 pm | |
| Jim Bryant | Oct 26, 2000 3:29 pm | |
| Mark Murray | Oct 26, 2000 3:56 pm | |
| Doug Barton | Oct 26, 2000 9:00 pm | |
| Terry Lambert | Oct 27, 2000 5:19 pm | |
| Doug Barton | Oct 27, 2000 7:18 pm |
| Subject: | Re: entropy reseeding is totally broken | |
|---|---|---|
| From: | Андрей Чернов (ac...@nagual.pp.ru) | |
| Date: | Oct 25, 2000 3:50:07 am | |
| List: | org.freebsd.freebsd-current | |
On Wed, Oct 25, 2000 at 10:35:55AM +0000, Terry Lambert wrote:
I see the opposite. I see that without writing to the /dev/random device I get a cons is an object that cares fortune 99+% of the time on my first login. With it, I see more decently random fortunes (but I haven't done a statistical analysis of them to see how random things are).
Is it just me, or have there been more problems achieving real statistical randomness since /dev/random went in, than at any other time in BSD history?
I booted a 1.5 system a couple of times for grins.
It gives you a different fortune each time.
Note that 1.5 "lacked" /dev/random.
It is because /dev/random totally ignore _time_ and not reseed from it, but no other randomness source available at boot time.
At the boot /dev/random tries to reseed from other sources (excepting time), but:
1) Reseed code is broken, in come case (as I describe) all reseeding data is ignored, only its size is counted until it was as big as 16384. Mark not fix it yet at this moment nor confirm he is able to reproduce this bug.
2) Reseeding state may not preserve across the boot due to various reasons like panic, etc. Since _time_ is ignored, all other data /etc/rc tries to collect now can be non-random _easily_!
Unless _time_ will be used, /dev/random is plain unusable for production usage.
-- Andrey A. Chernov http://ache.pp.ru/
To Unsubscribe: send mail to majo...@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message