Re: randomdev entropy gathering is really weak

[Jeroen C. van Gelderen]

Poul-Henning Kamp wrote:
> 
> In message <[EMAIL PROTECTED]>, "Louis A. Mamakos" writ
> es:
> 
> >In fact, it would be rather interesting to have a configuration flag which
> >always forces something like an fsck on a file system in order to provide
> >some entropy to the random device.  Or some other user-exposed way of
> >providing entropy.  I might have some data on disk, or some network
> >operations which can be performed to help seed the entropy pool.
> 
> What we really need is this:
> 
>         fetch -o http://entropy.freebsd.org/ > /dev/random
> 
> with a bunch of volounteers providing random bits to people in need.
> 
> I have thought about adding a entropy server to my array of weird
> servers in my lab.  Something like a Geiger counter and a smokedetector
> could do wonders.

Right, and an attacker laughingly sniffing those bits.
I think you forgot a ';-p'

Cheers,
Jeroen
-- 
Jeroen C. van Gelderen          o      _     _         _
[EMAIL PROTECTED]  _o     /\_   _ \\o  (_)\__/o  (_)
                      _< \_   _>(_) (_)/<_    \_| \   _|/' \/
                     (_)>(_) (_)        (_)   (_)    (_)'  _\o_


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message