Re: [RFC][PATCH] Pseudo-random number generator

2007-01-16 Thread Jan Glauber
On Tue, 2006-12-05 at 14:07 +0100, Jan Glauber wrote: > Yes, if an attacker knows the initial clock value a brute-force attack > would be feasible to predict the output. But I don't know if the > hardware completely relies on the clock values or if there is any > internal state which is not

Re: [RFC][PATCH] Pseudo-random number generator

2007-01-16 Thread Jan Glauber
On Tue, 2006-12-05 at 14:07 +0100, Jan Glauber wrote: Yes, if an attacker knows the initial clock value a brute-force attack would be feasible to predict the output. But I don't know if the hardware completely relies on the clock values or if there is any internal state which is not visible by

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-08 Thread Jan Glauber
On Thu, 2006-12-07 at 19:43 +0100, Arnd Bergmann wrote: > On Thursday 07 December 2006 16:19, Jan Glauber wrote: > > Hm, why is /dev/urandom implemented in the kernel? > > > > It could be done completely in user-space (like libica already does) > > but I think having a device node where you can

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-08 Thread Jan Glauber
On Thu, 2006-12-07 at 19:43 +0100, Arnd Bergmann wrote: On Thursday 07 December 2006 16:19, Jan Glauber wrote: Hm, why is /dev/urandom implemented in the kernel? It could be done completely in user-space (like libica already does) but I think having a device node where you can read from

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-07 Thread Arnd Bergmann
On Thursday 07 December 2006 16:19, Jan Glauber wrote: > Hm, why is /dev/urandom implemented in the kernel? > > It could be done completely in user-space (like libica already does) > but I think having a device node where you can read from is the simplest > implementation. Also, if we can solve

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-07 Thread Jan Glauber
On Thu, 2006-12-07 at 16:06 +0100, Arnd Bergmann wrote: > On Friday 01 December 2006 14:19, Jan Glauber wrote: > > I've chosen the char driver since it allows the user to decide which > > pseudo-random > > numbers he wants to use. That means there is a new interface for the s390 > > PRNG, called

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-07 Thread Arnd Bergmann
On Friday 01 December 2006 14:19, Jan Glauber wrote: > I've chosen the char driver since it allows the user to decide which > pseudo-random > numbers he wants to use. That means there is a new interface for the s390 > PRNG, called /dev/prandom. > > I would like to know if there are any

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-07 Thread Arnd Bergmann
On Friday 01 December 2006 14:19, Jan Glauber wrote: I've chosen the char driver since it allows the user to decide which pseudo-random numbers he wants to use. That means there is a new interface for the s390 PRNG, called /dev/prandom. I would like to know if there are any objections,

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-07 Thread Jan Glauber
On Thu, 2006-12-07 at 16:06 +0100, Arnd Bergmann wrote: On Friday 01 December 2006 14:19, Jan Glauber wrote: I've chosen the char driver since it allows the user to decide which pseudo-random numbers he wants to use. That means there is a new interface for the s390 PRNG, called

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-05 Thread Jan Glauber
On Mon, 2006-12-04 at 11:15 -0500, [EMAIL PROTECTED] wrote: > On Fri, 01 Dec 2006 14:19:15 +0100, Jan Glauber said: > > New s390 machines have hardware support for the generation of pseudo-random > > numbers. This patch implements a simple char driver that exports this > > numbers > > to

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-05 Thread Jan Glauber
On Mon, 2006-12-04 at 11:15 -0500, [EMAIL PROTECTED] wrote: On Fri, 01 Dec 2006 14:19:15 +0100, Jan Glauber said: New s390 machines have hardware support for the generation of pseudo-random numbers. This patch implements a simple char driver that exports this numbers to user-space. Other

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-04 Thread Valdis . Kletnieks
On Fri, 01 Dec 2006 14:19:15 +0100, Jan Glauber said: > New s390 machines have hardware support for the generation of pseudo-random > numbers. This patch implements a simple char driver that exports this numbers > to user-space. Other possible implementations would have been: > + for (i = 0;

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-04 Thread Valdis . Kletnieks
On Fri, 01 Dec 2006 14:19:15 +0100, Jan Glauber said: New s390 machines have hardware support for the generation of pseudo-random numbers. This patch implements a simple char driver that exports this numbers to user-space. Other possible implementations would have been: + for (i = 0; i

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-01 Thread Bodo Eggert
Alan <[EMAIL PROTECTED]> wrote: > On Fri, 01 Dec 2006 16:20:46 +0100 > Jan Glauber <[EMAIL PROTECTED]> wrote: >> Yes, a user can just symlink urandom to prandom and will have a faster >> generator. > > > More usefully they can use it as an entropy source with an entropy > daemon to feed it into

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-01 Thread Alan
On Fri, 01 Dec 2006 16:20:46 +0100 Jan Glauber <[EMAIL PROTECTED]> wrote: > Yes, a user can just symlink urandom to prandom and will have a faster > generator. More usefully they can use it as an entropy source with an entropy daemon to feed it into the standard urandom/random. - To unsubscribe

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-01 Thread Jan Glauber
On Fri, 2006-12-01 at 13:39 +, Alan wrote: > > * merging the s390 PRNG with the random pool implementation > > PRO: no new interface, random numbers can be read through /dev/urandom > > CON: complex implementation, could only use traditional /dev/urandom > > algorithm > > or

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-01 Thread Alan
> * merging the s390 PRNG with the random pool implementation > PRO: no new interface, random numbers can be read through /dev/urandom > CON: complex implementation, could only use traditional /dev/urandom algorithm > or hardware-accelerated implementation Also PRO: Can be verified by

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-01 Thread Alan
* merging the s390 PRNG with the random pool implementation PRO: no new interface, random numbers can be read through /dev/urandom CON: complex implementation, could only use traditional /dev/urandom algorithm or hardware-accelerated implementation Also PRO: Can be verified by non-IBM

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-01 Thread Jan Glauber
On Fri, 2006-12-01 at 13:39 +, Alan wrote: * merging the s390 PRNG with the random pool implementation PRO: no new interface, random numbers can be read through /dev/urandom CON: complex implementation, could only use traditional /dev/urandom algorithm or hardware-accelerated

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-01 Thread Alan
On Fri, 01 Dec 2006 16:20:46 +0100 Jan Glauber [EMAIL PROTECTED] wrote: Yes, a user can just symlink urandom to prandom and will have a faster generator. More usefully they can use it as an entropy source with an entropy daemon to feed it into the standard urandom/random. - To unsubscribe from

Re: [RFC][PATCH] Pseudo-random number generator

2006-12-01 Thread Bodo Eggert
Alan [EMAIL PROTECTED] wrote: On Fri, 01 Dec 2006 16:20:46 +0100 Jan Glauber [EMAIL PROTECTED] wrote: Yes, a user can just symlink urandom to prandom and will have a faster generator. More usefully they can use it as an entropy source with an entropy daemon to feed it into the standard