From owner-freebsd-arch@FreeBSD.ORG Sun Aug 18 11:40:14 2013 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id B91DA7A0; Sun, 18 Aug 2013 11:40:14 +0000 (UTC) (envelope-from mark@grondar.org) Received: from gromit.grondar.org (grandfather.grondar.org [IPv6:2a01:348:0:15:5d59:5c20:0:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 7B5F5230D; Sun, 18 Aug 2013 11:40:14 +0000 (UTC) Received: from graveyard.grondar.org ([88.96.155.33] helo=gronkulator.grondar.org) by gromit.grondar.org with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1VB1L7-000K81-Qj; Sun, 18 Aug 2013 12:40:11 +0100 Subject: Re: random(4) plugin infrastructure for mulitple RNG in a modular fashion Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) Content-Type: multipart/signed; boundary="Apple-Mail=_7324AA12-2CDF-410B-B7F7-6F947D16DAE9"; protocol="application/pgp-signature"; micalg=pgp-sha512 From: Mark R V Murray In-Reply-To: <86r4dr5j3p.fsf@nine.des.no> Date: Sun, 18 Aug 2013 12:40:04 +0100 Message-Id: <445431BF-41DB-42B5-90C8-B73832B37BAF@grondar.org> References: <20130807183112.GA79319@dragon.NUXI.org> <86pptfnu33.fsf@nine.des.no> <20130815231713.GD76666@x96.org> <20130816002625.GE76666@x96.org> <9B274F48-0C88-4117-BEAC-1A555772A3C5@grondar.org> <86a9kf733d.fsf@nine.des.no> <0C97B866-A169-4141-8368-AA7F5B5382F4@grondar.org> <861u5r71zi.fsf@nine.des.no> <892B11BD-396D-4F82-B97C-753F72CA494D@grondar.org> <86r4dr5j3p.fsf@nine.des.no> To: =?iso-8859-1?Q?Dag-Erling_Sm=F8rgrav?= X-Mailer: Apple Mail (2.1508) X-SA-Score: -2.2 Cc: Arthur Mesh , freebsd-arch@freebsd.org, secteam@freebsd.org, Philip Paeps X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Aug 2013 11:40:14 -0000 --Apple-Mail=_7324AA12-2CDF-410B-B7F7-6F947D16DAE9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 On 18 Aug 2013, at 12:33, Dag-Erling Sm=F8rgrav wrote: > Mark R V Murray writes: >> OK - in the context of what is currently there, it makes less sense = than >> that; loading RDRAND/Ivy and Nehemiah simultaneously is silly because >> they are different architectures, and only one can ever work on a = particular >> box; so what happens is some script selects the wrong one? I suppose >> the probe is there to prevent this. >=20 > I don't know offhand whether we support them, but there are discrete > HWRNGs which might be present alongside an on-die HWRNG; and in all > cases, Yarrow and / or Fortuna may be present in the kernel alongside = a > supported HWRNG. We do support them; I sent a list. Its a black/white choice; either they get used as Yarroow source data, or they are straight /dev/random = drivers, not both. >> We still have the anachronism where the older hardware RNGs are = turned >> into /dev/random devices and the newer ones supply their entropy to >> the software (Yarrow) for further processing. >=20 > Provided the HWRNG is of sufficient quality, the user should be = allowed > to use it directly (through /dev/random) without Yarrow / Fortuna. At > the same time, we do not want to lose the ability to feed their output > to Yarrow / Fortuna. Plugging all {P,HW}RNGs into a common framework > makes it *easier*, not *harder*, to support both options. The current code does not address that, but happens to be a useful, if small, step in getting That does not appear to be part of the design, rather a useful accident. M --=20 Mark R V Murray --Apple-Mail=_7324AA12-2CDF-410B-B7F7-6F947D16DAE9 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: GPGTools - http://gpgtools.org iQCVAwUBUhCymN58vKOKE6LNAQrqnQQAkOdrebQs6/3c7qYYXEFHYz26DBNBIY3+ BiLJlkDcw1XFnS6zAitc5nhRIW6iEUQ4spXLeBCxT/7JGi7ezUEs2pUnVYgMbNbl khMORPOYU8+mJzsdLOW5CyRbrdAvuTTRycu6QGsCirsXA73KTlL7lsDrRON+TIem Bt0AQ3pDUF4= =4Tfo -----END PGP SIGNATURE----- --Apple-Mail=_7324AA12-2CDF-410B-B7F7-6F947D16DAE9--