From owner-freebsd-net@FreeBSD.ORG  Thu Jun 10 19:39:51 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4889E16A4CE
	for <freebsd-net@freebsd.org>; Thu, 10 Jun 2004 19:39:51 +0000 (GMT)
Received: from out003.verizon.net (out003pub.verizon.net [206.46.170.103])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CFDB643D4C
	for <freebsd-net@freebsd.org>; Thu, 10 Jun 2004 19:39:50 +0000 (GMT)
	(envelope-from cswiger@mac.com)
Received: from [192.168.1.3] ([68.161.84.3]) by out003.verizon.net
          (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
          id <20040610193949.VBIA6671.out003.verizon.net@[192.168.1.3]>;
          Thu, 10 Jun 2004 14:39:49 -0500
Message-ID: <40C8B906.7000904@mac.com>
Date: Thu, 10 Jun 2004 15:39:50 -0400
From: Chuck Swiger <cswiger@mac.com>
Organization: The Courts of Chaos
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.7) Gecko/20040608
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Holger Eitzenberger <Holger.Eitzenberger@t-online.de>
References: <20040610212709.A1672@eitzenberger.name>
In-Reply-To: <20040610212709.A1672@eitzenberger.name>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Authentication-Info: Submitted using SMTP AUTH at out003.verizon.net from
	[68.161.84.3] at Thu, 10 Jun 2004 14:39:49 -0500
cc: FreeBSD Net <freebsd-net@freebsd.org>
Subject: Re: choosing another random number generator
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jun 2004 19:39:51 -0000

Holger Eitzenberger wrote:
> using FBSD 4.9 I want to choose another RNG, because I have to
> following line in the logs when starting IPSec:
> 
> 	WARNING: pseudo-random number generator used for IPsec processing
> 
> Against popular believe[1] the Handbook or the random(4) manpage
> does not mention how to switch to another RNG.
> 
> I have set the variable $rand_irqs accordingly.

Consider getting something like:

http://www.soekris.com/vpn1401.htm

...which will provide you with a hardware-based RNG.  You'll need to enable 
some options in the kernel to use it (search for HIFN in LINT)...

-- 
-Chuck