From owner-freebsd-arch@FreeBSD.ORG Sat Aug 24 08:35:56 2013 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 488A74E4; Sat, 24 Aug 2013 08:35:56 +0000 (UTC) (envelope-from mark@grondar.org) Received: from gromit.grondar.org (grandfather.grondar.org [IPv6:2a01:348:0:15:5d59:5c20:0:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 083D9226B; Sat, 24 Aug 2013 08:35:55 +0000 (UTC) Received: from [2001:470:9174:1:99e7:47d0:ed0e:f6f5] by gromit.grondar.org with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1VD9Jw-0008Z6-1m; Sat, 24 Aug 2013 09:35:47 +0100 Subject: Re: random(4) plugin infrastructure for mulitple RNG in a modular fashion Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) Content-Type: multipart/signed; boundary="Apple-Mail=_D9A85106-FADA-46ED-9AAC-B9935A71D3A6"; protocol="application/pgp-signature"; micalg=pgp-sha512 From: Mark R V Murray In-Reply-To: <20130823231808.GT94127@funkthat.com> Date: Sat, 24 Aug 2013 09:35:38 +0100 Message-Id: <0ABD5A7F-D647-4958-92DB-79D277C9AE7C@grondar.org> References: <20130816002625.GE76666@x96.org> <9B274F48-0C88-4117-BEAC-1A555772A3C5@grondar.org> <86a9kf733d.fsf@nine.des.no> <0C97B866-A169-4141-8368-AA7F5B5382F4@grondar.org> <861u5r71zi.fsf@nine.des.no> <892B11BD-396D-4F82-B97C-753F72CA494D@grondar.org> <86r4dr5j3p.fsf@nine.des.no> <4C1BD77C-8C6B-4044-9285-5978A3BC4B70@kientzle.com> <537622E1-F785-4BFA-B829-09DCDB484606@grondar.org> <932AB5CA-778E-438D-8FD3-8C0F29F3D117@kientzle.com> <20130823231808.GT94127@funkthat.com> To: John-Mark Gurney X-Mailer: Apple Mail (2.1508) X-SA-Score: -1.0 Cc: Tim Kientzle , FreeBSD-arch Arch , secteam@freebsd.org, =?iso-8859-1?Q?Dag-Erling_Sm=F8rgrav?= X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Aug 2013 08:35:56 -0000 --Apple-Mail=_D9A85106-FADA-46ED-9AAC-B9935A71D3A6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 On 24 Aug 2013, at 00:18, John-Mark Gurney wrote: > Tim Kientzle wrote this message on Sun, Aug 18, 2013 at 12:27 -0700: >> But clearly some people really want to be able to >> force /dev/random to be the unconditioned output >> of a particular HW RNG. I don't know if this is a >> good idea or not, but clearly there are people who >> want this. >=20 > Considering that the Ivy bridge's rdrand implementation already uses > AES to condition the raw entropy source, using Yarrow/etc to > additionally condition it seems excesive, hence why some people want > to use it directly=85 Nehemiah as well, using a Davies-meyer hash in software. However, what may be excessive for one person may be another's requirement. M --=20 Mark R V Murray --Apple-Mail=_D9A85106-FADA-46ED-9AAC-B9935A71D3A6 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: GPGTools - http://gpgtools.org iQCVAwUBUhhwXt58vKOKE6LNAQpV2wQArVhVCiPmJijv53f34SznlHhPr3Uz4G4V htbUuHCuILD80UWjPr0/6Clr0YH29LVsVgu3hrP42fsidc7Uwnw6aHqqkV/3Dcku NssBuMEU7C9cvazBvl/u1vMue9hHdz4gaeb8wwXJeBUyJ611oI4AjZ1budJvfRQc fjTyib7efHc= =80Bz -----END PGP SIGNATURE----- --Apple-Mail=_D9A85106-FADA-46ED-9AAC-B9935A71D3A6--