From owner-cvs-all@FreeBSD.ORG Sat Apr 10 01:40:04 2004 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1129116A4CE for ; Sat, 10 Apr 2004 01:40:04 -0700 (PDT) Received: from tx2.oucs.ox.ac.uk (tx2.oucs.ox.ac.uk [163.1.2.163]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7E1A343D31 for ; Sat, 10 Apr 2004 01:40:03 -0700 (PDT) (envelope-from colin.percival@wadham.ox.ac.uk) Received: from scan2.oucs.ox.ac.uk ([163.1.2.162] helo=localhost) by tx2.oucs.ox.ac.uk with esmtp (Exim 4.24) id 1BCE1y-0005SG-Kc for cvs-all@FreeBSD.org; Sat, 10 Apr 2004 09:40:02 +0100 Received: from rx2.oucs.ox.ac.uk ([163.1.2.161]) by localhost (scan2.oucs.ox.ac.uk [163.1.2.162]) (amavisd-new, port 25) with ESMTP id 20840-03 for ; Sat, 10 Apr 2004 09:40:02 +0100 (BST) Received: from gateway.wadham.ox.ac.uk ([163.1.161.253]) by rx2.oucs.ox.ac.uk with smtp (Exim 4.24) id 1BCE1y-0005SC-7D for cvs-all@FreeBSD.org; Sat, 10 Apr 2004 09:40:02 +0100 Received: (qmail 9043 invoked by uid 1004); 10 Apr 2004 08:40:01 -0000 Received: from colin.percival@wadham.ox.ac.uk by gateway by uid 71 with qmail-scanner-1.20 (clamscan: 0.67. sweep: 2.18/3.79. Clear:RC:1(163.1.161.131):. Processed in 0.335727 secs); 10 Apr 2004 08:40:01 -0000 Received: from dhcp1131.wadham.ox.ac.uk (HELO piii600.wadham.ox.ac.uk) (163.1.161.131) by gateway.wadham.ox.ac.uk with SMTP; 10 Apr 2004 08:40:01 -0000 Message-Id: <6.0.1.1.1.20040410093354.07d96008@imap.sfu.ca> X-Sender: cperciva@imap.sfu.ca (Unverified) X-Mailer: QUALCOMM Windows Eudora Version 6.0.1.1 Date: Sat, 10 Apr 2004 09:39:58 +0100 To: Bruce M Simpson From: Colin Percival In-Reply-To: <20040410082705.GR710@empiric.dek.spc.org> References: <20040409103618.A48723@root.org> <200404091834.i39IYi0w060497@grimreaper.grondar.org> <20040410082705.GR710@empiric.dek.spc.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" cc: cvs-src@FreeBSD.org cc: src-committers@FreeBSD.org cc: cvs-all@FreeBSD.org cc: Mark Murray cc: Nate Lawson Subject: Re: cvs commit: src/sys/modules/random Makefile src/sys/dev/random harvest.c hash.c hash.h nehemiah.c nehemiah.h probe.c randomdev.c randomdev.h randomdev_soft.c randomdev_soft.h yar X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Apr 2004 08:40:04 -0000 At 09:27 10/04/2004, Bruce M Simpson wrote: >I'm inclined to trust your judgement here on this, Mark, but Nate does have >a valid point; we need to be sure that the entropy sources are of sufficiently >high quality or we risk compromising the system. Is there any reason we can't just have an rc.conf variable entropy_trust_the_spooks = "YES" which allows users to choose between optimal performance and possible problems if the entropy source isn't as good as the vendor claims? Colin Percival