Collecting entropy from device_attach() times.

RW rwmaillists at googlemail.com
Wed Sep 19 17:48:11 UTC 2012


On Wed, 19 Sep 2012 17:28:46 +0200
Dag-Erling Smørgrav wrote:

 
> I would also suggest modifying yarrow to block reseeding as long as
> possible, ideally right up until the first time something asks for a
> random number, since reseeding throws away all accumulated entropy.

reseeding doesn't throw away entropy it just resets the counters, after
initrandom forces a slow reseed all of the accumulated entropy  (up
to 256 bits) is in the generator.



More information about the freebsd-security mailing list