lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Wed, 23 Dec 2020 13:28:51 +0100
From:   Torsten Duwe <>
To:     Marcelo Henrique Cerri <>
Cc:     "Jason A. Donenfeld" <>,
        "Theodore Y. Ts'o" <>,
        Linus Torvalds <>,
        Stephan Müller <>,
        Willy Tarreau <>,
        Linux Crypto Mailing List <>,
        Nicolai Stange <>,
        LKML <>,
        Arnd Bergmann <>,
        "Eric W. Biederman" <>,
        "Alexander E. Patrakov" <>,
        "Ahmed S. Darwish" <>,
        Matthew Garrett <>,
        Vito Caputo <>,
        Andreas Dilger <>,
        Jan Kara <>, Ray Strode <>,
        William Jon McCann <>,
        zhangjs <>,
        Andy Lutomirski <>,
        Florian Weimer <>,
        Lennart Poettering <>,
        Peter Matthias <>,
        Neil Horman <>,
        Randy Dunlap <>,
        Julia Lawall <>,
        Dan Carpenter <>,
        And y Lavr <>,
        Eric Biggers <>,
        Ard Biesheuvel <>,
        Petr Tesarik <>,
Subject: Re: drivers/char/random.c needs a (new) maintainer

On Fri, 18 Dec 2020 10:25:19 -0300
Marcelo Henrique Cerri <> wrote:

> Hi, Ted and Jason.
> Any updates on that?
> I don't believe Torsten's concerns are simply about *applying* patches
> but more about these long periods of radio silence. That kills

Exactly. I could live with replies in the style of "old" Linus like:
"Your code is crap, because it does X and Y". Then I knew how to
proceed. But this extended silence slows things down a lot.

> collaboration and disengage people. More than simply reviewing patches
> I would expect a maintainer to give directions and drive the
> community. Asking Jason to review Nicolai's patches was a step towards
> that, but I believe we still could benefit from better communication.

Even regarding this I'm not so sure it was a good idea. Jason seems to
narrow the proposed changes down to "FIPS certification", when it
actually is a lot more. I think his motivation suffers because of his
personal dislike.

> Besides Nicolai's RFC, are you also planning to take another look at
> Stephan's patches?

Yes, please advise! For important, major changes the maintainer should
ping the contributors, not vice versa. Not even to mention the bunch of
minor changes pending, some even acked by independent developers.


Powered by blists - more mailing lists