From owner-freebsd-security@FreeBSD.ORG Sat Sep 15 02:18:41 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 646EA106566B for ; Sat, 15 Sep 2012 02:18:41 +0000 (UTC) (envelope-from emu@emu.so) Received: from mail-wi0-f178.google.com (mail-wi0-f178.google.com [209.85.212.178]) by mx1.freebsd.org (Postfix) with ESMTP id DF6D58FC0A for ; Sat, 15 Sep 2012 02:18:40 +0000 (UTC) Received: by wibhr14 with SMTP id hr14so368283wib.13 for ; Fri, 14 Sep 2012 19:18:39 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=references:from:in-reply-to:mime-version:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=XRns8Bsz4/hPohPN4djCsoXT84K85tV0+xvESz5rGJE=; b=OLzAjXlySw4vFlYREyzV2FHdPTxYdl0Md2pAEtZyRqd/Yq0wjEYlVkEbvFpV11jJrR zL48ISPErVrvKr47kBUKFquHnLE72yocMChrv8DvqNtWg2dfF1g3eufV4JtfldE++jGo rhXBGcEkS61eSWUiEtjAuN+cvUV2dE8tM/qUujU91Cg3Ajhdw/Z12cM+iRxYWH/aVGld iKQluaB81MDoHIEBgyVnmyu+bxwp1R/A2aK6MSFki1xIHD0EB9nqJg6m024EXjarcKaY On9zB0Uy8lzw7Bdj9qmMmewGGrmtsYHIYA7ON3vuQUgvHcWdCVNNMgfuXfSBz9Bl7M8f FfrA== Received: by 10.180.98.200 with SMTP id ek8mr2006072wib.0.1347675519440; Fri, 14 Sep 2012 19:18:39 -0700 (PDT) References: <50453686.9090100@FreeBSD.org> <20120911082309.GD72584@dragon.NUXI.org> <504F0687.7020309@FreeBSD.org> <201209121628.18088.jhb@freebsd.org> <5050F477.8060409@FreeBSD.org> <20120912213141.GI14077@x96.org> <20120913052431.GA15052@dragon.NUXI.org> <20120914154617.39025ac0@gumby.homeunix.com> <20120915010713.492c65a0@gumby.homeunix.com> From: Samuel Ports In-Reply-To: <20120915010713.492c65a0@gumby.homeunix.com> Mime-Version: 1.0 (1.0) Date: Fri, 14 Sep 2012 22:18:35 -0400 Message-ID: <-5330022830022085986@unknownmsgid> To: RW Content-Type: text/plain; charset=ISO-8859-1 X-Gm-Message-State: ALoCoQmIuN8SPo8l1S82eMNcuDFATCA2qQXiYuNfpM408zb08al1myzSGHFvF3G3cvbv5YaWAqzy Cc: Arthur Mesh , Lepore , Doug Barton , "Ian@freebsd.org" , Ben Laurie , "freebsd-security@freebsd.org" , "Bjoern A. Zeeb" Subject: Re: svn commit: r239569 - head/etc/rc.d X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Sep 2012 02:18:41 -0000 Omg cant an freebsd-entropy be created as mailing list already Sent from my iPhone On Sep 14, 2012, at 8:09 PM, RW wrote: > On Fri, 14 Sep 2012 17:25:59 +0100 > Ben Laurie wrote: > >> On Fri, Sep 14, 2012 at 3:46 PM, RW >> wrote: >>> On Fri, 14 Sep 2012 14:43:53 +0100 >>> Ben Laurie wrote: >>> >>>> On Fri, Sep 14, 2012 at 2:38 PM, Bjoern A. Zeeb >>>> wrote: >>>>> 7) send all data to the kernel and hash (arch dependent?) it + >>>>> counter value into the buffer on overflow, as in b[n] = H(b[n] + >>>>> c >>>>> + i[n]) in the kernel >>>>> (can control when buffer full and only then take action when >>>>> needed, indepedent on how seed data is chosen, uses standard >>>>> technology) >>>> >>>> IMO, this is the only good option. >>> >>> No it isn't. I means that the hashing is unconditional, so anyone >>> that needs a faster boot needs to patch the kernel. >> >> Has anyone measured the cost of doing this? Also, if you really want >> to turn it off, we could provide a flag. > > Yes, read the thread. > >>> It has no advantage >>> whatsoever over a minor change to initrandom. >> >> It absolutely has. It applies to all inputs to /dev/random, not just >> those that come from initrandom. > > If the rc script are written correctly it shouldn't matter, there no > need to write to /dev/random after the boot - it wont do anything > useful. > > It has no advantage over hashing the low-grade entropy in userland > which is is just couple of lines difference in a shell script. > >> Also, should something get to write >> to it before initrandom, initrandom's input would still be used. > > There's no reason to do that, so why do you think it matter? > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"