svn commit: r239569 - head/etc/rc.d

Ben Laurie benl at freebsd.org
Fri Sep 14 19:50:34 UTC 2012


On Fri, Sep 14, 2012 at 8:22 PM, Mark Murray <markm at freebsd.org> wrote:
> Ben Laurie writes:
>> > What??! Have you seen how Yarrow does its harvesting??
>>
>> If you XOR into the as-yet-unharvested buffer, then appropriately
>> aligned repeated input makes the buffer zero.
>

I have no idea what point you're trying to make.

> There is an "if"

"if you use your proposed solution"

> and an "appropriately" in there.

And the input happens to line up.

> The entropy is
> estimated as Zero anyway, in spite of getting "free" TSC jitter, and if
> this is an attack, the system is screwed to begin with.

What I am trying to do is extract whatever entropy there is in the
input. You appear to be saying that there's no point adding extra
entropy because it is estimated at zero. This makes no sense to me.


More information about the freebsd-security mailing list