On Fri, 14 Sep 2012 14:43:53 +0100 Ben Laurie wrote: > On Fri, Sep 14, 2012 at 2:38 PM, Bjoern A. Zeeb <[email protected]> > wrote: > > 7) send all data to the kernel and hash (arch dependent?) it + > > counter value into the buffer on overflow, as in b[n] = H(b[n] + c > > + i[n]) in the kernel > > (can control when buffer full and only then take action when > > needed, indepedent on how seed data is chosen, uses standard > > technology) > > IMO, this is the only good option.
No it isn't. I means that the hashing is unconditional, so anyone that needs a faster boot needs to patch the kernel. It has no advantage whatsoever over a minor change to initrandom. _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"
