Date: Sun, 23 Jul 2000 09:31:09 +0200 From: Mark Murray <mark@grondar.za> To: Kris Kennaway <kris@FreeBSD.org> Cc: current@FreeBSD.org Subject: Re: randomdev entropy gathering is really weak Message-ID: <200007230731.JAA90585@grimreaper.grondar.za> In-Reply-To: <Pine.BSF.4.21.0007221515150.26717-100000@freefall.freebsd.org> ; from Kris Kennaway <kris@FreeBSD.org> "Sat, 22 Jul 2000 15:19:29 MST." References: <Pine.BSF.4.21.0007221515150.26717-100000@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> The core of my complaint is that even though our old PRNG did crappy
> entropy handling, we used to have such a method, which is now gone. I'd
> like to see yarrow hang off /dev/urandom and have /dev/random tap directly
> into the entropy pool (perhaps a third pool separate from Yarrow's
> fast/slow) so I can generate my large keys safely.
By your own admission, the old system was bad; yet you still want
${it}? You'd like to see a programmer with less experience than
Schneier come up with a more secure algorithm than him?
M
--
Mark Murray
Join the anti-SPAM movement: http://www.cauce.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200007230731.JAA90585>