From owner-freebsd-arch@FreeBSD.ORG Mon Aug 20 22:02:50 2012 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 65C4C106564A for ; Mon, 20 Aug 2012 22:02:50 +0000 (UTC) (envelope-from sgk@troutmask.apl.washington.edu) Received: from troutmask.apl.washington.edu (troutmask.apl.washington.edu [128.95.76.21]) by mx1.freebsd.org (Postfix) with ESMTP id 430068FC0C for ; Mon, 20 Aug 2012 22:02:50 +0000 (UTC) Received: from troutmask.apl.washington.edu (localhost.apl.washington.edu [127.0.0.1]) by troutmask.apl.washington.edu (8.14.5/8.14.5) with ESMTP id q7KM2hnr096789; Mon, 20 Aug 2012 15:02:43 -0700 (PDT) (envelope-from sgk@troutmask.apl.washington.edu) Received: (from sgk@localhost) by troutmask.apl.washington.edu (8.14.5/8.14.5/Submit) id q7KM2hC0096788; Mon, 20 Aug 2012 15:02:43 -0700 (PDT) (envelope-from sgk) Date: Mon, 20 Aug 2012 15:02:43 -0700 From: Steve Kargl To: Ben Laurie Message-ID: <20120820220243.GA96700@troutmask.apl.washington.edu> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Cc: freebsd-arch@freebsd.org Subject: Re: /dev/random X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Aug 2012 22:02:50 -0000 On Mon, Aug 20, 2012 at 07:49:16PM +0100, Ben Laurie wrote: > Apparently /dev/random uses h/w PRNGs if available, discarding all > other sources of randomness. > > This seems like a mistake to me - we should fix it. > > Also, it seems that entropy is available in detailed interrupt timing > (see http://www.issihosts.com/haveged/) which might be useful on > entropy-starved systems - I suspect we are not exploiting this source, > and in light of recent developments, we probably should be, > > Comments? Well, it's hard to comment when you failed to explain *why* you think it is a mistake. In addition, I'm having a hard time parsing your 1st sentence, which appears to be related to this sentence: The device will probe for certain hardware entropy sources, and use these in preference to the fallback, which is a generator implemented in software. from 'man 4 random'. Your 'all other sources of randomness' would then need to be amended to 'all other sources of entropy'. But, then 'all other sources' does not make sense, because only the 'generator implemented in software' is discarded. It is also unclear why a linux-only project for gathering entropy is relevant here given that FreeBSD already has the ability to use both hardware and software interrupts as sources of entropy. -- Steve