From owner-freebsd-rc@FreeBSD.ORG Tue Sep 11 11:28:53 2012 Return-Path: Delivered-To: freebsd-rc@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0A3B1106564A; Tue, 11 Sep 2012 11:28:53 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id B6A858FC14; Tue, 11 Sep 2012 11:28:52 +0000 (UTC) Received: from ds4.des.no (smtp.des.no [194.63.250.102]) by smtp.des.no (Postfix) with ESMTP id DD9FD64E8; Tue, 11 Sep 2012 13:28:51 +0200 (CEST) Received: by ds4.des.no (Postfix, from userid 1001) id 89CA78B17; Tue, 11 Sep 2012 13:28:51 +0200 (CEST) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Doug Barton References: <50450F2A.10708@FreeBSD.org> <20120903203505.GN1464@x96.org> <50451D6E.30401@FreeBSD.org> <20120903214638.GO1464@x96.org> <50453686.9090100@FreeBSD.org> <20120904220754.GA3643@server.rulingia.com> <20120906174247.GB13179@dragon.NUXI.org> <20120906230157.5307a21f@gumby.homeunix.com> <20120906224703.GD89120@x96.org> <50493480.8060307@FreeBSD.org> <20120911061530.GA77399@dragon.NUXI.org> <504EDC67.9070700@FreeBSD.org> Date: Tue, 11 Sep 2012 13:28:51 +0200 In-Reply-To: <504EDC67.9070700@FreeBSD.org> (Doug Barton's message of "Mon, 10 Sep 2012 23:38:31 -0700") Message-ID: <86sjao7q8c.fsf@ds4.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: Arthur Mesh , freebsd-rc@freebsd.org, obrien@freebsd.org, freebsd-security@freebsd.org, RW Subject: Re: svn commit: r239569 - head/etc/rc.d X-BeenThere: freebsd-rc@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion related to /etc/rc.d design and implementation." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Sep 2012 11:28:53 -0000 Doug Barton writes: > 1. Pseudo-randomize the order in which we utilize the files in > /var/db/entropy There's no need for randomization if we make sure that *all* the data written to /dev/random is used, rather than just the first 4096 bytes; or that we reduce the amount of data to 4096 bytes before we write it so none of it is discarded. My gut feeling is that compression is better than hashing for that purpose, but at this point I'd be more comfortable if someone with an academic background in either cryptography or statistics (cperciva@?) weighed in. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no