From owner-freebsd-security  Fri Jun  6 14:15:13 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id OAA12537
          for security-outgoing; Fri, 6 Jun 1997 14:15:13 -0700 (PDT)
Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id OAA12525
          for <security@FreeBSD.ORG>; Fri, 6 Jun 1997 14:15:10 -0700 (PDT)
Received: (from wollman@localhost)
	by khavrinen.lcs.mit.edu (8.8.5/8.8.5) id RAA12756;
	Fri, 6 Jun 1997 17:15:05 -0400 (EDT)
Date: Fri, 6 Jun 1997 17:15:05 -0400 (EDT)
From: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Message-Id: <199706062115.RAA12756@khavrinen.lcs.mit.edu>
To: Simon Shapiro <Shimon@i-Connect.Net>
Cc: security@FreeBSD.ORG
Subject: Re: sequence predictability (fwd)
In-Reply-To: <XFMail.970606120935.Shimon@i-Connect.Net>
References: <19970606091536.08429@tversu.ac.ru>
	<XFMail.970606120935.Shimon@i-Connect.Net>
Sender: owner-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

<<On Fri, 06 Jun 1997 12:09:35 -0700 (PDT), Simon Shapiro <Shimon@i-Connect.Net> said:

> Good Idea.  /dev/rand, setup properly produces very good results.

It's also far too slow.

If I had a working kernel debugger at the moment (it's sick from
version skew at the moment) or BPF (it's in use by something else) I
could document precisely how the ISS changes.  In the current design,
it is incremented by a random amount which averages to approximately
the old rate.

-GAWollman

--
Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the same
wollman@lcs.mit.edu  | O Siem / The fires of freedom 
Opinions not those of| Dance in the burning flame
MIT, LCS, CRS, or NSA|                     - Susan Aglukark and Chad Irschick