Date: Tue, 25 Sep 2012 18:37:35 +0200 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?= <des@des.no> Cc: Jonathan Anderson <jonathan.anderson@cl.cam.ac.uk>, John Baldwin <jhb@freebsd.org>, Ben Laurie <benl@freebsd.org>, freebsd-security@freebsd.org, RW <rwmaillists@googlemail.com>, Mariusz Gromada <mariusz.gromada@gmail.com> Subject: Re: Collecting entropy from device_attach() times. Message-ID: <20120925163735.GC1391@garage.freebsd.pl> In-Reply-To: <86mx0eqsgy.fsf@ds4.des.no> References: <201209200758.51924.jhb@freebsd.org> <20120922080323.GA1454@garage.freebsd.pl> <20120922195325.GH1454@garage.freebsd.pl> <505E59DC.7090505@gmail.com> <20120923151706.GN1454@garage.freebsd.pl> <5060D723.6020305@gmail.com> <CAG5KPzxf0Rfufk5K6Jt4e85xc7zXY_B3a2Sq0Uf_uVLHbV-baw@mail.gmail.com> <86r4pqqwnm.fsf@ds4.des.no> <20120925102240.GC1571@garage.freebsd.pl> <86mx0eqsgy.fsf@ds4.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
--dkEUBIird37B8yKS Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 25, 2012 at 12:58:37PM +0200, Dag-Erling Sm=F8rgrav wrote: > Pawel Jakub Dawidek <pjd@FreeBSD.org> writes: > > Note that this fake data is the hardest to gather entropy from, as it > > doesn't interact with any external hardware. I'm all for testing it on > > real hardware and I expect to be able to gather even more entropy from > > it (so discarding less than top 7 bits). The problem with making > > observations during boot takes much, much longer, so it will limit the > > number os samples significantly, and as you know the more samples the > > better. >=20 > I have a handful of SFF machines which support PXE. I can easily set up > an NFS root where /etc/rc just remounts / rw, dumps the data and > reboots. With a sub-minute cycle time, I can get a couple of hundred > thousand samples per machine over the weekend. That would be great. > (I don't even need PXE - they'll probably boot faster from USB sticks or > disks) And probably more reliable. My netbooted test machines occasionally don't boot and you don't want to find out in the morning that the whole process stopped at 1AM:) --=20 Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://tupytaj.pl --dkEUBIird37B8yKS Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iEYEARECAAYFAlBh3c4ACgkQForvXbEpPzTVKwCdFCECxe+wfQ4ivsJYT3miQWMy 7s4An3OzP2iWNAgD8Nc29k9qjyHqsaaS =/OCR -----END PGP SIGNATURE----- --dkEUBIird37B8yKS--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120925163735.GC1391>