random(4) plugin infrastructure for mulitple RNG in a modular fashion

Mark R V Murray mark at grondar.org
Thu Aug 8 21:19:59 UTC 2013


On 8 Aug 2013, at 22:16, "David O'Brien" <obrien at FreeBSD.org> wrote:

> On Thu, Aug 08, 2013 at 08:38:09PM +0100, Mark R V Murray wrote:
>> My current inclination is to make Yarrow the basic device (or "Fortuna
>> Lite", but that is a problem for MUCH later), and make the hardware
>> devices feed Yarrow, if they are present.
> 
> Our approach is mechanism over policy.  That is, give the user the
> choice of if their HW should be used directly or fed into the SW PRNG.

I don't see a problem with that either, as long as there are no nasty
surprises like the possibility of getting no RNG at all, and not being
in a position to notice.

M
-- 
Mark R V Murray

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 353 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freebsd.org/pipermail/freebsd-arch/attachments/20130808/b6de2805/attachment.sig>


More information about the freebsd-arch mailing list