seeding randomness in zee cloud

RW rwmaillists at googlemail.com
Fri May 31 12:02:47 UTC 2013


On Fri, 31 May 2013 12:01:02 +0200
Dirk-Willem van Gulik wrote:


> Now we happen to have very easy access to blocks of 1024bits of
> randomness from a remote server in already nicely PKI signed packages
> (as it is needed later for something else).
> 
> Is it safe to simply *add* those with:
> 
> 	set -1
> 	# fetch randomness & check signature
> 	.. snipped...
> 
> 	# Seed Software random generator
> 	#
> 	cat rnd > /dev/random

To be on the safe side you should sleep for about 0.5 seconds after
this 

> 
> 	# Activate software random generator as an additional source
> 	sysctl kern.random.sys.harvest.swi=1

IIRC this doesn't do anything


More information about the freebsd-hackers mailing list