Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Nov 2011 00:49:29 -0500
From:      David Schultz <das@FreeBSD.ORG>
To:        Andrey Chernov <ache@FreeBSD.ORG>, Oliver Pinter <oliver.pntr@gmail.com>,  current@FreeBSD.ORG, secteam@FreeBSD.ORG
Subject:   Re: Is fork() hook ever possible?
Message-ID:  <20111115054929.GA27803@zim.MIT.EDU>
In-Reply-To: <20111115023912.GA68523@vniz.net>
References:  <20111112154135.GA21512@zim.MIT.EDU> <20111112171531.GA83419@vniz.net> <20111114013004.GA53392@zim.MIT.EDU> <20111114192721.GA16834@vniz.net> <20111114205855.GB58790@zim.MIT.EDU> <20111114212926.GA28783@vniz.net> <20111114230855.GA59545@zim.MIT.EDU> <20111115004443.GA50429@vniz.net> <CAPjTQNFSbkiaDUzMh_WYffM9vF1-H3j-FA2FZJfHR-0uJyJ3eQ@mail.gmail.com> <20111115023912.GA68523@vniz.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Nov 15, 2011, Andrey Chernov wrote:
> In case you mean passing later whole structure like:
> 
> arc4_addrandom((u_char *)&rdat, sizeof(rdat));
> 
> it will be incorrect because it change known algorithm parameters, which 
> defines exact 128 bytes and not anything else.

No, RC4 keys are anything up to 256 bytes.

I think what you really want is a union in any case, but relax.
arc4_stir() works right now, so I think it can stay as is until
we're ready to make further functional changes, e.g., getting
entropy from the KERN_ARND sysctl.  But that's complicated by
the fact that KERN_ARND won't tell you if it has failed to produce
any useful entropy, and I won't have the cycles to look into it for
a little while.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20111115054929.GA27803>