From owner-freebsd-arch@FreeBSD.ORG Tue Aug 20 07:14:44 2013 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 9F47FADA; Tue, 20 Aug 2013 07:14:44 +0000 (UTC) (envelope-from mark@grondar.org) Received: from gromit.grondar.org (grandfather.grondar.org [IPv6:2a01:348:0:15:5d59:5c20:0:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 5BC662804; Tue, 20 Aug 2013 07:14:44 +0000 (UTC) Received: from graveyard.grondar.org ([88.96.155.33] helo=gronkulator.grondar.org) by gromit.grondar.org with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1VBg9H-000O0U-UB; Tue, 20 Aug 2013 08:14:41 +0100 Subject: Re: random(4) plugin infrastructure for mulitple RNG in a modular fashion Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) Content-Type: multipart/signed; boundary="Apple-Mail=_6ACAF6A4-0C52-4CB0-B00A-E1953DB22B11"; protocol="application/pgp-signature"; micalg=pgp-sha512 From: Mark R V Murray In-Reply-To: Date: Tue, 20 Aug 2013 08:14:32 +0100 Message-Id: References: <20130807183112.GA79319@dragon.NUXI.org> <86pptfnu33.fsf@nine.des.no> <20130815231713.GD76666@x96.org> <20130816002625.GE76666@x96.org> <9B274F48-0C88-4117-BEAC-1A555772A3C5@grondar.org> <86a9kf733d.fsf@nine.des.no> <0C97B866-A169-4141-8368-AA7F5B5382F4@grondar.org> <861u5r71zi.fsf@nine.des.no> <892B11BD-396D-4F82-B97C-753F72CA494D@grondar.org> <86r4dr5j3p.fsf@nine.des.no> <4C1BD77C-8C6B-4044-9285-5978A3BC4B70@kientzle.com> <537622E1-F785-4BFA-B829-09DCDB484606@grondar.org> <932AB5CA-778E-438D-8FD3-8C0F29F3D117@kientzle.com> <71A92486-2213-421E-B3D2-E55816C18924@bsdimp.com> <551C488B-D56A-4E9F-8617-17B96D3E7677@bsdimp.com> To: Tim Kientzle X-Mailer: Apple Mail (2.1508) X-SA-Score: -2.2 Cc: =?iso-8859-1?Q?Dag-Erling_Sm=F8rgrav?= , secteam@freebsd.org, FreeBSD-arch Arch X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Aug 2013 07:14:44 -0000 --Apple-Mail=_6ACAF6A4-0C52-4CB0-B00A-E1953DB22B11 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 On 20 Aug 2013, at 04:12, Tim Kientzle wrote: >=20 > I've not heard anyone asking for a run-time switch in > GENERIC. des@ is the main one, and its what we have right now in CURRENT. > I would suggest making that a longer-term option > and having the choice of mixer/conditioner > (Yarrow, Fortuna, or HW passthrough) be > a compile-time choice for now. Too late. :-) Questions needing answering now include "should Yarrow/Fortuna be = run-time choosable?", "there are more than two hardware RNGs (Ivy, = Nehemiah) in the system, how do we best make them available?", "if more = than one HW RNG is present, do we mix them, and how?", "if the requested = configuration does not give you a random number supply, does the system = block or panic?". >>>> I'd go so far as to say that if you have random in your kernel, = then you need to specify some "filter" or you get a compile-time error. = Specifying yarrow via DEFAULTS or std.foo is fine by me, since both of = those can be overriden fairly easily.... I'd also think we'd want to = FAIL_PANIC or FAIL_BLOCKING, and have that choice hard wired at some = level too, to be explicit about things. But maybe that's gilding things = a bit too much and a tunable would suffice=85 >>>=20 >>> Won't sell. Folks are saying they want the choice of the raw output. = In GENERIC. >=20 > I've not heard anyone asking for raw output in GENERIC. There have been a couple. Again des@ is the one I remember most clearly = off the top of my head. M --=20 Mark R V Murray --Apple-Mail=_6ACAF6A4-0C52-4CB0-B00A-E1953DB22B11 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: GPGTools - http://gpgtools.org iQCVAwUBUhMXXt58vKOKE6LNAQpnVgP/SpHWG57QnGkwzVlIHAMIRPamtG5EUfn9 Cxyd9t8oIe/Wgmut7IIdBJhCc8TiuiP5fMR9W8qDeQaU4uKuW2GjQXaHnBRwDKE7 jxIx6nzkaOFDtfCRKRESbOO80Zv+4LteRZ1xvGwqEaigtZzVu2ZsevW2JCJ8OWOj VyIidYtffnU= =N0gm -----END PGP SIGNATURE----- --Apple-Mail=_6ACAF6A4-0C52-4CB0-B00A-E1953DB22B11--