Re: randomdev entropy gathering is really weak

[Mark Murray]

> > > Obviously, if you need more randomness than a stock FreeBSD system
> > > can provide you with, you add hardware to give you more randomness.
> > 
> > This won't help if it's fed through Yarrow.
> 
> *BZZZZTTT!* Wrong. A good hardware RNG when fed at a high-enough rate
> through Yarrow can easily produce a continuous stream of what you need.
> (If we take that route, the current implementation may need to be tweaked
> a bit to stop reseeding after a period of unuse to avoid hammering the
> kernel too much; this needs careful thought).

Been thinking about this; the current implemnetation runs continuously
(thanks to taskqueue(9)). There is no reason that it couldn't be made
(somewhat) use-driven, so that it works harder at harvesting when being
used heavily. This may make it slower, but it would hurt the kernel a
bit less when not in use.

M
--
Mark Murray
Join the anti-SPAM movement: http://www.cauce.org


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message