Re: randomdev entropy gathering is really weak

[Mark Murray]

> In message <[EMAIL PROTECTED]>, Mark Murray writes:
> 
> >getnanotime() is already extensively used; 
> 
> I looked at that use, but as far as I can tell, it is only used as a
> flag at this time, the bits returned by getnanotime() does not end up
> in the entropy pool ?

Not true; struct entropy contains nanotime and the harvested entropy;
_both_ are hashed in the reseed operation.

> I'm not dissatisfied about that btw, the output from getnanotime()
> is not very random at all, unless you dive into the timecounter
> code to find out what the parameters are.

I agree that it is not (very) random; however cclock jitter and keystroke
timing can help thwart the bad guys...

M
--
Mark Murray
Join the anti-SPAM movement: http://www.cauce.org


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message