Date: Tue, 25 Sep 2012 12:58:37 +0200 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: Pawel Jakub Dawidek <pjd@FreeBSD.org> Cc: Jonathan Anderson <jonathan.anderson@cl.cam.ac.uk>, John Baldwin <jhb@freebsd.org>, Ben Laurie <benl@freebsd.org>, freebsd-security@freebsd.org, RW <rwmaillists@googlemail.com>, Mariusz Gromada <mariusz.gromada@gmail.com> Subject: Re: Collecting entropy from device_attach() times. Message-ID: <86mx0eqsgy.fsf@ds4.des.no> In-Reply-To: <20120925102240.GC1571@garage.freebsd.pl> (Pawel Jakub Dawidek's message of "Tue, 25 Sep 2012 12:22:41 %2B0200") References: <20120919231051.4bc5335b@gumby.homeunix.com> <20120920102104.GA1397@garage.freebsd.pl> <201209200758.51924.jhb@freebsd.org> <20120922080323.GA1454@garage.freebsd.pl> <20120922195325.GH1454@garage.freebsd.pl> <505E59DC.7090505@gmail.com> <20120923151706.GN1454@garage.freebsd.pl> <5060D723.6020305@gmail.com> <CAG5KPzxf0Rfufk5K6Jt4e85xc7zXY_B3a2Sq0Uf_uVLHbV-baw@mail.gmail.com> <86r4pqqwnm.fsf@ds4.des.no> <20120925102240.GC1571@garage.freebsd.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
Pawel Jakub Dawidek <pjd@FreeBSD.org> writes: > Note that this fake data is the hardest to gather entropy from, as it > doesn't interact with any external hardware. I'm all for testing it on > real hardware and I expect to be able to gather even more entropy from > it (so discarding less than top 7 bits). The problem with making > observations during boot takes much, much longer, so it will limit the > number os samples significantly, and as you know the more samples the > better. I have a handful of SFF machines which support PXE. I can easily set up an NFS root where /etc/rc just remounts / rw, dumps the data and reboots. With a sub-minute cycle time, I can get a couple of hundred thousand samples per machine over the weekend. (I don't even need PXE - they'll probably boot faster from USB sticks or disks) DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86mx0eqsgy.fsf>