Date: Tue, 13 Apr 2004 14:49:14 -0400 From: Charles Swiger <cswiger@mac.com> Cc: freebsd-current@FreeBSD.ORG Subject: Re: dev/random Message-ID: <428207C0-8D7B-11D8-B697-003065ABFD92@mac.com> In-Reply-To: <200404131550.i3DFocIn099231@grimreaper.grondar.org> References: <200404131550.i3DFocIn099231@grimreaper.grondar.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Apr 13, 2004, at 11:50 AM, Mark Murray wrote:
[ ...with regard to /dev/random blocking at boot... ]
> For now, kickstart the device with
>
> # ${SOME_COMMAND} > /dev/random
>
> SOME_COMMAND should have output entropy proportional to the seriousness
> of your threat model. For messing around at home, 'ls -alR /etc /var'
> is
> probably OK.
Why not set $entropy_dir in rc.conf and kickstart /dev/random using
much higher quality entropy available when the machine was shutdown
last?
[ A good answer might be that the Original Poster is using
limited-write media like compact flash to boot from and doesn't want to
keep scribbling 8K or so of entropy to CF, but mailing-list lag has
made it difficult to track the context original message. :-) ]
--
-Chuck
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?428207C0-8D7B-11D8-B697-003065ABFD92>