lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20080516141534.GD11302@csclub.uwaterloo.ca>
Date:	Fri, 16 May 2008 10:15:34 -0400
From:	lsorense@...lub.uwaterloo.ca (Lennart Sorensen)
To:	Will Newton <will.newton@...il.com>
Cc:	Jeff Garzik <jeff@...zik.org>,
	"Kok, Auke" <auke-jan.h.kok@...el.com>,
	Rick Jones <rick.jones2@...com>,
	"Brandeburg, Jesse" <jesse.brandeburg@...el.com>,
	Alan Cox <alan@...rguk.ukuu.org.uk>,
	Chris Peterson <cpeterso@...terso.com>, netdev@...r.kernel.org,
	linux-kernel@...r.kernel.org
Subject: Re: [PATCH] drivers/net: remove network drivers' last few uses of IRQF_SAMPLE_RANDOM

On Fri, May 16, 2008 at 02:59:03PM +0100, Will Newton wrote:
> I don't know egd that well, but from a cursory look it gets data from
> such things as w or last (wtmp) which is static on most embedded
> boxes. It also uses netstat and snmp - surely this is at least as easy
> to manipulate as interrupt timings? I'm not a cryptographer by any
> means but it looks as if it works by magic. Last changed 2002, written
> in perl. No, I don't think I'll be shipping this on any systems any
> time soon.

I will certainly keep applying a patch to the kernel to enable the
ethernet driver as a source of entropy.  I won't expect the upstream
kernel to want it, but it certainly is useful to have some source of
entropy.  Generating an ssl key or the like can take an awful long time
if you have no sources at all.

The last thing I need is another perl script eating up resources for no
good reason.

-- 
Len Sorensen
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ