Pawel Jakub Dawidek <[email protected]> writes: > Note that this fake data is the hardest to gather entropy from, as it > doesn't interact with any external hardware. I'm all for testing it on > real hardware and I expect to be able to gather even more entropy from > it (so discarding less than top 7 bits). The problem with making > observations during boot takes much, much longer, so it will limit the > number os samples significantly, and as you know the more samples the > better.
I have a handful of SFF machines which support PXE. I can easily set up an NFS root where /etc/rc just remounts / rw, dumps the data and reboots. With a sub-minute cycle time, I can get a couple of hundred thousand samples per machine over the weekend. (I don't even need PXE - they'll probably boot faster from USB sticks or disks) DES -- Dag-Erling Smørgrav - [email protected] _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"
