Date: Mon, 19 Aug 2013 08:31:35 +0100 From: Mark R V Murray <mark@grondar.org> To: Warner Losh <imp@bsdimp.com> Cc: Tim Kientzle <tim@kientzle.com>, =?iso-8859-1?Q?Dag-Erling_Sm=F8rgrav?= <des@des.no>, secteam@freebsd.org, FreeBSD-arch Arch <freebsd-arch@freebsd.org> Subject: Re: random(4) plugin infrastructure for mulitple RNG in a modular fashion Message-ID: <D218D7B1-AB8B-4A80-A822-A8F0AB1EF43C@grondar.org> In-Reply-To: <71A92486-2213-421E-B3D2-E55816C18924@bsdimp.com> References: <20130807183112.GA79319@dragon.NUXI.org> <86pptfnu33.fsf@nine.des.no> <20130815231713.GD76666@x96.org> <20130816002625.GE76666@x96.org> <9B274F48-0C88-4117-BEAC-1A555772A3C5@grondar.org> <86a9kf733d.fsf@nine.des.no> <0C97B866-A169-4141-8368-AA7F5B5382F4@grondar.org> <861u5r71zi.fsf@nine.des.no> <892B11BD-396D-4F82-B97C-753F72CA494D@grondar.org> <86r4dr5j3p.fsf@nine.des.no> <4C1BD77C-8C6B-4044-9285-5978A3BC4B70@kientzle.com> <537622E1-F785-4BFA-B829-09DCDB484606@grondar.org> <932AB5CA-778E-438D-8FD3-8C0F29F3D117@kientzle.com> <F908BF80-538B-4363-ACCC-3D860CBEE359@grondar.org> <71A92486-2213-421E-B3D2-E55816C18924@bsdimp.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail=_0025415E-671A-467E-94BE-CD750558D597 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 On 19 Aug 2013, at 08:18, Warner Losh <imp@bsdimp.com> wrote: > If we're going to allow passthrough, we should require the kernel = config to explicitly do something to get pass through. >=20 > nodevice yarrow > device random_passthrough >=20 > would be my suggestion. I don't think it will sell; folks are asking for GENERIC with a run-time = switch to flip between the raw HW generator output and a SW = mixer/conditioner. > I'd go so far as to say that if you have random in your kernel, then = you need to specify some "filter" or you get a compile-time error. = Specifying yarrow via DEFAULTS or std.foo is fine by me, since both of = those can be overriden fairly easily.... I'd also think we'd want to = FAIL_PANIC or FAIL_BLOCKING, and have that choice hard wired at some = level too, to be explicit about things. But maybe that's gilding things = a bit too much and a tunable would suffice=85 Won't sell. Folks are saying they want the choice of the raw output. In = GENERIC. "What Will Sell" may be up for debate and mind-changing; I think that is = the route to explore. M --=20 Mark R V Murray --Apple-Mail=_0025415E-671A-467E-94BE-CD750558D597 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: GPGTools - http://gpgtools.org iQCVAwUBUhHJ3N58vKOKE6LNAQqFFgP/ZRbON4H4Afhx4qqyDlacqY1j61yzIc4e hvLEl8pQHHoFeu3zJXOyPoVoVvcGzKVpiWl0e1ASzTeyYjDm0fk/tXcRyYIO8SCV fPGkiQ50soh+LJoj5m/WjTfdwKGCrFQSFC9/zqHQy7dHsg41mz+9T3PR4Ewbjxxi 0GkF0hW2z9o= =mczO -----END PGP SIGNATURE----- --Apple-Mail=_0025415E-671A-467E-94BE-CD750558D597--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?D218D7B1-AB8B-4A80-A822-A8F0AB1EF43C>