From owner-freebsd-current  Mon Jul 17 18:36:38 2000
Delivered-To: freebsd-current@freebsd.org
Received: from cypherpunks.ai (cypherpunks.ai [209.88.68.47])
	by hub.freebsd.org (Postfix) with ESMTP
	id 94B8137B52D; Mon, 17 Jul 2000 18:36:34 -0700 (PDT)
	(envelope-from jeroen@vangelderen.org)
Received: from vangelderen.org (grolsch.ai [209.88.68.214])
	by cypherpunks.ai (Postfix) with ESMTP
	id CD0D14C; Mon, 17 Jul 2000 21:36:32 -0400 (AST)
Message-ID: <3973B4A0.693373CA@vangelderen.org>
Date: Mon, 17 Jul 2000 21:36:32 -0400
From: "Jeroen C. van Gelderen" <jeroen@vangelderen.org>
X-Mailer: Mozilla 4.73 [en] (X11; I; Linux 2.2.12 i386)
X-Accept-Language: en
MIME-Version: 1.0
To: Poul-Henning Kamp <phk@critter.freebsd.dk>
Cc: "Louis A. Mamakos" <louie@TransSys.COM>,
	Mark Murray <mark@grondar.za>,
	"Andrey A. Chernov" <ache@FreeBSD.ORG>, current@FreeBSD.ORG
Subject: Re: randomdev entropy gathering is really weak
References: <2450.963841019@critter.freebsd.dk>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Poul-Henning Kamp wrote:
> 
> In message <200007171319.JAA04774@whizzo.transsys.com>, "Louis A. Mamakos" writ
> es:
> 
> >In fact, it would be rather interesting to have a configuration flag which
> >always forces something like an fsck on a file system in order to provide
> >some entropy to the random device.  Or some other user-exposed way of
> >providing entropy.  I might have some data on disk, or some network
> >operations which can be performed to help seed the entropy pool.
> 
> What we really need is this:
> 
>         fetch -o http://entropy.freebsd.org/ > /dev/random
> 
> with a bunch of volounteers providing random bits to people in need.
> 
> I have thought about adding a entropy server to my array of weird
> servers in my lab.  Something like a Geiger counter and a smokedetector
> could do wonders.

Right, and an attacker laughingly sniffing those bits.
I think you forgot a ';-p'

Cheers,
Jeroen
-- 
Jeroen C. van Gelderen          o      _     _         _
jeroen@vangelderen.org  _o     /\_   _ \\o  (_)\__/o  (_)
                      _< \_   _>(_) (_)/<_    \_| \   _|/' \/
                     (_)>(_) (_)        (_)   (_)    (_)'  _\o_


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message