From owner-freebsd-current Sun Jul 16 11:25:41 2000 Delivered-To: freebsd-current@freebsd.org Received: from grimreaper.grondar.za (grimreaper.grondar.za [196.7.18.138]) by hub.freebsd.org (Postfix) with ESMTP id EAB1137BB9E; Sun, 16 Jul 2000 11:25:32 -0700 (PDT) (envelope-from mark@grondar.za) Received: from grimreaper.grondar.za (localhost [127.0.0.1]) by grimreaper.grondar.za (8.9.3/8.9.3) with ESMTP id UAA03911; Sun, 16 Jul 2000 20:26:44 +0200 (SAST) (envelope-from mark@grimreaper.grondar.za) Message-Id: <200007161826.UAA03911@grimreaper.grondar.za> To: "Andrey A. Chernov" Cc: markm@FreeBSD.ORG, current@FreeBSD.ORG Subject: Re: randomdev entropy gathering is really weak References: <20000716105943.A60072@freebsd.org> In-Reply-To: <20000716105943.A60072@freebsd.org> ; from "Andrey A. Chernov" "Sun, 16 Jul 2000 10:59:45 MST." Date: Sun, 16 Jul 2000 20:26:44 +0200 From: Mark Murray Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > I found that I always got the same fortune quote after reboot, over and over > again. It means that /dev/random produce exact the same values after reboot. > It means that machine timer or keyboard not used for enthropy gathering. > Using keyboard alone not helps for automatic tasks because it can be even not > present, so machine timer must be used at least after reboot stage i.e. in > randomdev init procedure. Otherwise first random values are very predictable > and subject for attack. Gotcha - fix coming; I need to stash some randomness at shutdown time, and use that to reseed the RNG at reboot time. M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message