From owner-freebsd-security@FreeBSD.ORG Sat Sep 15 00:07:25 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 944A91065670; Sat, 15 Sep 2012 00:07:25 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wi0-f172.google.com (mail-wi0-f172.google.com [209.85.212.172]) by mx1.freebsd.org (Postfix) with ESMTP id 39E668FC19; Sat, 15 Sep 2012 00:07:23 +0000 (UTC) Received: by wibhi8 with SMTP id hi8so343818wib.13 for ; Fri, 14 Sep 2012 17:07:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:cc:subject:message-id:in-reply-to:references:x-mailer :mime-version:content-type:content-transfer-encoding; bh=4O6OwRM1fQssmE+obBQ9vAgWSTa2zQKjRW62BDoP3jU=; b=IZJx8h3IZ1PhkFoCSTuWeBgAgBgtllSeh44RFHJr+GJsjXgyH9jcJogTA4lMWY/MBG sngEISCHojljruK6rDZZPhuLYQ0oJ2vYD462r7P2gKqzuTgOnmvfEG2Bjqp6XlDBj1ZH HEOd3qF9DC4/4sWlKIKwIBObxP+sXIBhYX0YJeXdmQnLnZ8baIrqQzuy6ycXaP9h0JzV WoGiemsvqNGjAXlXGJQqNVtONBqSuqNwurKujcDq66rPCFRcvm26AKLhLTrmHlHRi/V2 qRgRbR23gAHFpTt6jzHG1xFp+4Jj8vlsr4omx5mmrHQq7d4QjZcOAnp4jXwvxpWomHxj 0z0A== Received: by 10.180.91.1 with SMTP id ca1mr1360216wib.8.1347667637313; Fri, 14 Sep 2012 17:07:17 -0700 (PDT) Received: from gumby.homeunix.com (87-194-105-247.bethere.co.uk. [87.194.105.247]) by mx.google.com with ESMTPS id j6sm2308423wiy.4.2012.09.14.17.07.14 (version=SSLv3 cipher=OTHER); Fri, 14 Sep 2012 17:07:16 -0700 (PDT) Date: Sat, 15 Sep 2012 01:07:13 +0100 From: RW To: Ben Laurie Message-ID: <20120915010713.492c65a0@gumby.homeunix.com> In-Reply-To: References: <50453686.9090100@FreeBSD.org> <20120911082309.GD72584@dragon.NUXI.org> <504F0687.7020309@FreeBSD.org> <201209121628.18088.jhb@freebsd.org> <5050F477.8060409@FreeBSD.org> <20120912213141.GI14077@x96.org> <20120913052431.GA15052@dragon.NUXI.org> <20120914154617.39025ac0@gumby.homeunix.com> X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.6; amd64-portbld-freebsd8.3) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: Arthur Mesh , Lepore , Ian, Doug Barton , freebsd-security@freebsd.org, "Bjoern A. Zeeb" Subject: Re: svn commit: r239569 - head/etc/rc.d X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Sep 2012 00:07:25 -0000 On Fri, 14 Sep 2012 17:25:59 +0100 Ben Laurie wrote: > On Fri, Sep 14, 2012 at 3:46 PM, RW > wrote: > > On Fri, 14 Sep 2012 14:43:53 +0100 > > Ben Laurie wrote: > > > >> On Fri, Sep 14, 2012 at 2:38 PM, Bjoern A. Zeeb > >> wrote: > >> > 7) send all data to the kernel and hash (arch dependent?) it + > >> > counter value into the buffer on overflow, as in b[n] = H(b[n] + > >> > c > >> > + i[n]) in the kernel > >> > (can control when buffer full and only then take action when > >> > needed, indepedent on how seed data is chosen, uses standard > >> > technology) > >> > >> IMO, this is the only good option. > > > > No it isn't. I means that the hashing is unconditional, so anyone > > that needs a faster boot needs to patch the kernel. > > Has anyone measured the cost of doing this? Also, if you really want > to turn it off, we could provide a flag. Yes, read the thread. > > It has no advantage > > whatsoever over a minor change to initrandom. > > It absolutely has. It applies to all inputs to /dev/random, not just > those that come from initrandom. If the rc script are written correctly it shouldn't matter, there no need to write to /dev/random after the boot - it wont do anything useful. It has no advantage over hashing the low-grade entropy in userland which is is just couple of lines difference in a shell script. > Also, should something get to write > to it before initrandom, initrandom's input would still be used. There's no reason to do that, so why do you think it matter?