svn commit: r239569 - head/etc/rc.d
RW
rwmaillists at googlemail.com
Fri Sep 14 14:46:24 UTC 2012
On Fri, 14 Sep 2012 14:43:53 +0100
Ben Laurie wrote:
> On Fri, Sep 14, 2012 at 2:38 PM, Bjoern A. Zeeb <bz at freebsd.org>
> wrote:
> > 7) send all data to the kernel and hash (arch dependent?) it +
> > counter value into the buffer on overflow, as in b[n] = H(b[n] + c
> > + i[n]) in the kernel
> > (can control when buffer full and only then take action when
> > needed, indepedent on how seed data is chosen, uses standard
> > technology)
>
> IMO, this is the only good option.
No it isn't. I means that the hashing is unconditional, so anyone that
needs a faster boot needs to patch the kernel. It has no advantage
whatsoever over a minor change to initrandom.
More information about the freebsd-security
mailing list