Re: Patch: rework kernel random number subsystem

Thor Lancelot Simon <[email protected]> Mon, 31 Oct 2011 00:35:23 -0400
Newsgroups gmane.os.netbsd.devel.crypto,gmane.os.netbsd.devel.kernel,gmane.os.netbsd.devel.security
Message-ID <[email protected]>
New patch at http://www.panix.com/~tls/rnd3.diff which has Jachym Holecek's
fix for the "data corruption" issue (which isn't, actually), makes the
sysctl prng IPL_NONE, and fixes some issues revealed by LOCKDEBUG.

Also, this fixes a very old and ugly bug where rnd_add_data manipulated
the entropy pool directly without locking.

This actually seems fairly stable for me, so I'm curious about others'
results.  A good way to test is:
	while true; do sysctl kern.urandom > /dev/null; done

I'll do some KNF cleanup and hook this up to the pseudodevice nodes next,
and we can see how it performs.

Thor