Collecting entropy from device_attach() times.
RW
rwmaillists at googlemail.com
Thu Sep 20 22:01:38 UTC 2012
On Thu, 20 Sep 2012 11:05:32 +0200
Dag-Erling Smørgrav wrote:
> RW <rwmaillists at googlemail.com> writes:
> > Dag-Erling Smørgrav <des at des.no> writes:
> > > I would also suggest modifying yarrow to block reseeding as long
> > > as possible, ideally right up until the first time something asks
> > > for a random number, since reseeding throws away all accumulated
> > > entropy.
> > reseeding doesn't throw away entropy
>
> Yes, it does.
Would you elaborate? I don't see what you mean by that?
When yarrow reseeds, the previous generator key is hashed with the
pool[s], into the new key. They key will therefore *accumulate* entropy
across multiple reseeds.
More information about the freebsd-security
mailing list