Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 Sep 2002 12:38:09 -0700 (PDT)
From:      Nate Lawson <nate@root.org>
To:        Stacy Millions <stacy@millions.ca>
Cc:        hackers@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
Subject:   Re: kern_random interface
Message-ID:  <Pine.BSF.4.21.0209131225310.27608-100000@root.org>
In-Reply-To: <3D822EB8.4010201@millions.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 13 Sep 2002, Stacy Millions wrote:
> I have been working on a kld that provides a driver for the Intel 82802
> hardware random number generator. I have it working (give or take), but
> am not quite ready to release it. 

Great!

> I would also like to get some opinions on the how to enable the option to
> add entropy to kern_random. 
> I was thinking of an "rng interface". Then any hardware rng driver that
> implemented the device_method specified by the interface would be
> able to feed entropy to kern_random. It would be controlled by
> rndcontrol, something like "rndcontrol -d rng0" to enable device rng0
> to start feeding kern_random and "rndcontrol -D rng0" to disable it.
> It could also be extended to include methods for getting random data
> directly, so that things like IPSec could get their key data from a
> specific rng.
> 
> Am I on the right track here? I have looked at the Hardware Crypto
> Support stuff and I don't think anything I'm doing or purposing
> conflicts with it.

Your patch is for -stable.  The random subsystem has been replaced on
-current with Yarrow.  Mark Murray is the one you probably want to talk
with although Sam Leffler has also been doing a bit of work on the kernel
crypto stuff.

-Nate


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0209131225310.27608-100000>