On Fri, 31 May 2013 12:01:02 +0200
Dirk-Willem van Gulik wrote:

> Now we happen to have very easy access to blocks of 1024bits of
> randomness from a remote server in already nicely PKI signed packages
> (as it is needed later for something else).
> 
> Is it safe to simply *add* those with:
> 
>       set -1
>       # fetch randomness & check signature
>       .. snipped...
> 
>       # Seed Software random generator
>       #
>       cat rnd > /dev/random

To be on the safe side you should sleep for about 0.5 seconds after
this 

> 
>       # Activate software random generator as an additional source
>       sysctl kern.random.sys.harvest.swi=1

IIRC this doesn't do anything
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[email protected]"

Reply via email to