Date: Sun, 18 Aug 2013 11:20:03 +0100 From: Mark R V Murray <mark@grondar.org> To: =?iso-8859-1?Q?Dag-Erling_Sm=F8rgrav?= <des@des.no> Cc: Arthur Mesh <arthurmesh@gmail.com>, Philip Paeps <philip@freebsd.org>, secteam@freebsd.org, freebsd-arch@freebsd.org Subject: Re: random(4) plugin infrastructure for mulitple RNG in a modular fashion Message-ID: <892B11BD-396D-4F82-B97C-753F72CA494D@grondar.org> In-Reply-To: <861u5r71zi.fsf@nine.des.no> References: <20130807183112.GA79319@dragon.NUXI.org> <86pptfnu33.fsf@nine.des.no> <20130815231713.GD76666@x96.org> <20130816002625.GE76666@x96.org> <9B274F48-0C88-4117-BEAC-1A555772A3C5@grondar.org> <86a9kf733d.fsf@nine.des.no> <0C97B866-A169-4141-8368-AA7F5B5382F4@grondar.org> <861u5r71zi.fsf@nine.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail=_A2C0E59A-C2F8-4DA4-96BD-236DF6E84307 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 On 18 Aug 2013, at 11:00, Dag-Erling Sm=F8rgrav <des@des.no> wrote: > Mark R V Murray <mark@grondar.org> writes: >> I'm looking at the new "adaptors" code and wondering what its for. >=20 > It allows you to have multiple RNGs loaded or compiled-in = simultaneously > and select which one to use at runtime. Seems eminently sensible to = me. OK - in the context of what is currently there, it makes less sense than that; loading RDRAND/Ivy and Nehemiah simultaneously is silly because they are different architectures, and only one can ever work on a = particular box; so what happens is some script selects the wrong one? I suppose the probe is there to prevent this. We still have the anachronism where the older hardware RNGs are turned into /dev/random devices and the newer ones supply their entropy to the software (Yarrow) for further processing. I would find this more useful if Nehemiah and RDRAND/Ivy were to go the same way as the others, and became entropy sources to the software = device. This current mechanism could then be useful as a switch between Yarrow/Fortuna, but that is only useful (for as long as|if) we keep both (not an issue for some time except for the embedded folks). >> If the current three /dev/random drivers were each in KLDs, >> then kldloading the one you wanted would be sufficient without >> the extra complexity. >=20 > And what would happen if you loaded several? "Failure", I would hope - whatever that unintuitive error is that means "you already have this" (that needs fixing). But see above, if this is a Yarrow/Fortuna switch, then I'm warming to it. M --=20 Mark R V Murray --Apple-Mail=_A2C0E59A-C2F8-4DA4-96BD-236DF6E84307 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: GPGTools - http://gpgtools.org iQCVAwUBUhCf2958vKOKE6LNAQqZqgP+OXtZX7TzXdvRhq53HujnyKD3oESaFZzH nEVgoyKeP2mSnLFNaJX2nhwnwhmhCSJwqHs5/rbwzBiZ7rbKxoOQQmGw2y8D5T8K CSwwsKdq33qGjyK7BYsAi8eXJNM+CZ0k31gSAtPiaStbJ7CzQxyY6YzOLPCe81eK h7tw556JKMA= =Aez8 -----END PGP SIGNATURE----- --Apple-Mail=_A2C0E59A-C2F8-4DA4-96BD-236DF6E84307--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?892B11BD-396D-4F82-B97C-753F72CA494D>