From owner-freebsd-rc@FreeBSD.ORG Tue Sep 11 23:22:25 2012 Return-Path: Delivered-To: freebsd-rc@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E2EEE1065670; Tue, 11 Sep 2012 23:22:25 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from anubis.delphij.net (anubis.delphij.net [IPv6:2001:470:1:117::25]) by mx1.freebsd.org (Postfix) with ESMTP id BC4848FC12; Tue, 11 Sep 2012 23:22:25 +0000 (UTC) Received: from epsilon.delphij.net (drawbridge.ixsystems.com [206.40.55.65]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by anubis.delphij.net (Postfix) with ESMTPSA id DFC081E1F4; Tue, 11 Sep 2012 16:22:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=delphij.net; s=anubis; t=1347405745; bh=Gj3bwWccKz+SwUawpkGDKKgyxIn9R0IexRqZBT4zhAY=; h=Date:From:Reply-To:To:CC:Subject:References:In-Reply-To; b=49R9B9xDqQKwI1ptUZwkUwPRKHaNhYNtTqwfN3sKXKICIsAiMk37qT5qbKgjmyd/g vX8b3PP0RGF8i4t3dJltpXgj9EYqYOz+/ZT/K+lHQ/N03xdwQbAicoKvKBe5E8gtFt kjJT1+joI9SBlHGwjnVql2fBjQLGHiMla729YS0A= Message-ID: <504FC7B0.2060706@delphij.net> Date: Tue, 11 Sep 2012 16:22:24 -0700 From: Xin Li Organization: The freeBSD Project User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:10.0.7) Gecko/20120830 Thunderbird/10.0.7 MIME-Version: 1.0 To: obrien@freebsd.org References: <20120911061530.GA77399@dragon.NUXI.org> <504EDC67.9070700@FreeBSD.org> <86sjao7q8c.fsf@ds4.des.no> <20120911205302.27484fd6@gumby.homeunix.com> <20120911200925.GA88456@dragon.NUXI.org> <504FA76A.5000209@delphij.net> <20120911211730.GB89188@dragon.NUXI.org> <504FAB87.3020701@delphij.net> <20120911215212.GA89515@dragon.NUXI.org> <504FBD15.8040907@delphij.net> <20120911230121.GA90289@dragon.NUXI.org> In-Reply-To: <20120911230121.GA90289@dragon.NUXI.org> X-Enigmail-Version: 1.4.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: Arthur Mesh , Doug Barton , freebsd-rc@freebsd.org, freebsd-security@freebsd.org, RW , =?UTF-8?B?RGFnLUVybGluZyDvv70=?= , d@delphij.net Subject: Re: svn commit: r239569 - head/etc/rc.d X-BeenThere: freebsd-rc@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: d@delphij.net List-Id: "Discussion related to /etc/rc.d design and implementation." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Sep 2012 23:22:26 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 09/11/12 16:01, David O'Brien wrote: > On Tue, Sep 11, 2012 at 03:37:09PM -0700, Xin Li wrote: >> On 09/11/12 14:52, David O'Brien wrote: >>> On Tue, Sep 11, 2012 at 02:22:15PM -0700, Xin Li wrote: >>>> Hmm, but this sha256 run will turn the output to 65 bytes >>>> (hex representation of 256 bits of hash output, 64 bytes, and >>>> one \n), so, only 256 bits of random data, is that >>>> intentional? > ... >>> You suggested gzip, but I just don't know enough about >>> compression algorithms as they apply in this area to know if we >>> should use gzip instead or not. >> >> I don't think I know enough here, unfortunately... > > Since I cannot justify using gzip, I'm keeping the sha256 in my > patch. I am not opposed to someone else changing that to gzip. Please consider using sha512... I'm not quite convinced that this works by the way -- is 65 bytes enough to "kickstart" /dev/random? Cheers, - -- Xin LI https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBCAAGBQJQT8ewAAoJEG80Jeu8UPuzBSUIAK1nOAAkEcU+FcnGiCtebxqz ja4UbAGlr2rVItnEIqKG/juVMqb1ziIMGpn2M87C34Z7Go/VVcbfqVc1Gvr+PZgg U5Gm+O02Xy+mUJUBiYOrOWR2giIn32InCMMAdpDIL1N0q1YS/LXOtJPuvI70mb1T SZ9KReDJUIhmRVxuhbiRlFgw/zFSatnDArcCCxLx99JK9BvYj85Q/0OdOIQhaZmu IM1fLtI2HffIRpiJ+oIFuJMudEbZYJU6JX2/LWo3Ns3XTqCNSvhk5TmIyvAhKIVK CFLQOgrfHig3e1ir7TNGc/XmWrPUog1lKtAW3icWgnN39zkpIU16VOq2tq3CrCw= =loAC -----END PGP SIGNATURE-----