Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Jun 2004 15:39:50 -0400
From:      Chuck Swiger <cswiger@mac.com>
To:        Holger Eitzenberger <Holger.Eitzenberger@t-online.de>
Cc:        FreeBSD Net <freebsd-net@freebsd.org>
Subject:   Re: choosing another random number generator
Message-ID:  <40C8B906.7000904@mac.com>
In-Reply-To: <20040610212709.A1672@eitzenberger.name>
References:  <20040610212709.A1672@eitzenberger.name>

next in thread | previous in thread | raw e-mail | index | archive | help
Holger Eitzenberger wrote:
> using FBSD 4.9 I want to choose another RNG, because I have to
> following line in the logs when starting IPSec:
> 
> 	WARNING: pseudo-random number generator used for IPsec processing
> 
> Against popular believe[1] the Handbook or the random(4) manpage
> does not mention how to switch to another RNG.
> 
> I have set the variable $rand_irqs accordingly.

Consider getting something like:

http://www.soekris.com/vpn1401.htm

...which will provide you with a hardware-based RNG.  You'll need to enable 
some options in the kernel to use it (search for HIFN in LINT)...

-- 
-Chuck



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?40C8B906.7000904>