svn commit: r284959 - in head: . share/man/man4 share/man/man9 sys/conf sys/dev/glxsb sys/dev/hifn sys/dev/random sys/dev/rndtest sys/dev/safe sys/dev/syscons sys/dev/ubsec sys/dev/virtio/random sy...

[Mark R V Murray]

> On 2 Jul 2015, at 19:55, Simon J. Gerraty <sjg at juniper.net> wrote:
> 
> Mark R V Murray <markm at freebsd.org> wrote:
>> If so, can I confirm that you may be rolling your own non-Yarrow/Fortuna
>> mixer(s)?
> 
> AFAIK no mixer allowed; just direct SP800-90 compliant HMAC-DRBG.
> You can probably guess why we don't agree that's a brilliant arrangement
> but its not an argument we can win.

IIRC, that still requires some stochastic input?

> Same would apply for anyone else doing FIPS 140 evaled products.

Sure.

M
-- 
Mark R V Murray