Date: Thu, 6 Sep 2012 15:42:34 -0700 From: David O'Brien <obrien@FreeBSD.org> To: RW <rwmaillists@googlemail.com> Cc: Arthur Mesh <arthurmesh@gmail.com>, freebsd-security@freebsd.org, freebsd-rc@freebsd.org, Doug Barton <dougb@freebsd.org>, Peter Jeremy <peter@rulingia.com> Subject: Re: svn commit: r239569 - head/etc/rc.d Message-ID: <20120906224234.GA18953@dragon.NUXI.org> In-Reply-To: <20120906230157.5307a21f@gumby.homeunix.com> References: <5043DBAF.40506@FreeBSD.org> <20120903171538.GM1464@x96.org> <50450F2A.10708@FreeBSD.org> <20120903203505.GN1464@x96.org> <50451D6E.30401@FreeBSD.org> <20120903214638.GO1464@x96.org> <50453686.9090100@FreeBSD.org> <20120904220754.GA3643@server.rulingia.com> <20120906174247.GB13179@dragon.NUXI.org> <20120906230157.5307a21f@gumby.homeunix.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Sep 06, 2012 at 11:01:57PM +0100, RW wrote: > On Thu, 6 Sep 2012 10:42:47 -0700 David O'Brien wrote: > > On Wed, Sep 05, 2012 at 08:07:54AM +1000, Peter Jeremy wrote: > > > >What if, instead of replacing /entropy, we add an additional file > > > >in /var/db/entropy at boot time that is numerically 1 higher than > > > >$entropy_save_num ? > > > That sounds like a reasonable idea. > > > > I don't see what that adds or fixes. It does not correct the > > possible reuse of seed material. > > Reusing a secure entropy file is only a problem if the complete history > of yarrow, from boot until some significant output, is exactly the same > as on a previous boot. I feel this is discussed in the yarrow and Fortuna papers. Please provide specific section reference backing your position for me to read. Why are we trying to invent a new shiny way to address an issue discussed by yarrow's author? What is your specific argument against deleting the consumed seed file? Do you feel the 4k bytes of /entropy is too little? -- -- David (obrien@FreeBSD.org)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120906224234.GA18953>