From owner-freebsd-stable@FreeBSD.ORG  Wed Jan 15 19:08:14 2014
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id EE7B16CC
 for <freebsd-stable@freebsd.org>; Wed, 15 Jan 2014 19:08:14 +0000 (UTC)
Received: from smarthost1.sentex.ca (smarthost1.sentex.ca
 [IPv6:2607:f3e0:0:1::12])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id B38C61A8E
 for <freebsd-stable@freebsd.org>; Wed, 15 Jan 2014 19:08:14 +0000 (UTC)
Received: from [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a] (saphire3.sentex.ca
 [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a])
 by smarthost1.sentex.ca (8.14.7/8.14.7) with ESMTP id s0FJ8CTo014461;
 Wed, 15 Jan 2014 14:08:12 -0500 (EST) (envelope-from mike@sentex.net)
Message-ID: <52D6DC9C.3060007@sentex.net>
Date: Wed, 15 Jan 2014 14:08:12 -0500
From: Mike Tancsa <mike@sentex.net>
Organization: Sentex Communications
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: Darren Pilgrim <list_freebsd@bluerosetech.com>, freebsd-stable@freebsd.org
Subject: Re: [FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-14:01.random
References: <201401142011.s0EKBoi7082738@freefall.freebsd.org>
 <52D6BF9C.8070405@bluerosetech.com> <52D6D5C7.80200@sentex.net>
 <52D6D93F.7020600@bluerosetech.com>
In-Reply-To: <52D6D93F.7020600@bluerosetech.com>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.74
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Jan 2014 19:08:15 -0000

On 1/15/2014 1:53 PM, Darren Pilgrim wrote:
> 
> Yes, that's an obvious consequence of a compromised RNG; but that's not
> what I was asking.  I'm asking how the attacker could compromise the
> hardware RNG without also obtaining effectively unfettered access to the
> entire system.

I think the fear is at manufacturing time.  i.e. the suspicion is that
some govt agency asked a design weakness be built in.  Whether thats
true or a reasonable fear or not, I am not one to say....


	---Mike



-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike@sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/