seeding randomness in zee cloud
RW
rwmaillists at googlemail.com
Fri May 31 12:02:47 UTC 2013
On Fri, 31 May 2013 12:01:02 +0200
Dirk-Willem van Gulik wrote:
> Now we happen to have very easy access to blocks of 1024bits of
> randomness from a remote server in already nicely PKI signed packages
> (as it is needed later for something else).
>
> Is it safe to simply *add* those with:
>
> set -1
> # fetch randomness & check signature
> .. snipped...
>
> # Seed Software random generator
> #
> cat rnd > /dev/random
To be on the safe side you should sleep for about 0.5 seconds after
this
>
> # Activate software random generator as an additional source
> sysctl kern.random.sys.harvest.swi=1
IIRC this doesn't do anything
More information about the freebsd-hackers
mailing list