From owner-freebsd-current Mon Jul 17 12:56:22 2000 Delivered-To: freebsd-current@freebsd.org Received: from grimreaper.grondar.za (grimreaper.grondar.za [196.7.18.138]) by hub.freebsd.org (Postfix) with ESMTP id 9C19B37BB54; Mon, 17 Jul 2000 12:56:12 -0700 (PDT) (envelope-from mark@grondar.za) Received: from grimreaper.grondar.za (localhost [127.0.0.1]) by grimreaper.grondar.za (8.9.3/8.9.3) with ESMTP id VAA01275; Mon, 17 Jul 2000 21:57:25 +0200 (SAST) (envelope-from mark@grimreaper.grondar.za) Message-Id: <200007171957.VAA01275@grimreaper.grondar.za> To: "Andrey A. Chernov" Cc: current@FreeBSD.ORG Subject: Re: rc.shutdown hook is not a solution (was Re: randomdev entropy gathering is really weak) References: <20000717110255.A33448@freebsd.org> In-Reply-To: <20000717110255.A33448@freebsd.org> ; from "Andrey A. Chernov" "Mon, 17 Jul 2000 11:02:55 MST." Date: Mon, 17 Jul 2000 21:57:25 +0200 From: Mark Murray Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > The reason is not security only, the reason is buggy RNG. Imagine diskless > keyboard-less and mouse-less slide-show machine with no rc.shutdown hooks > since it comes with power up and goes down with power down. This machine > will always start with same picture because RNG have not enough enthropy. In > worst case we should relay only on processor registers always present, i.e. > timers and so on. rc.shutdown hook not solve problem completely. Actually, it is only a faulty reseed mechanism. For the purposes of your argument above, the time-of-day would be an acceptable reseed to random(9). For cryptographic randomness, more noise is needed. M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message