Re: insufficient entropy for rnd
"Perry E. Metzger" <[email protected]>
| Newsgroups | gmane.os.netbsd.devel.crypto |
|---|---|
| Message-ID | <[email protected]> |
[email protected] writes: > >It is the reason device-type net is disabled by default, and it's > >not a serious risk. Anyone who can predict the arrival time of a > >network packet interrupt (and subsequent processing) within the > >precision of a CPU cycle counter has enough control over your > >machine that randomness is irrelevant. > > my understanding was that it is not a problem with "who can predict the > arrival time of a network packet interrupt", but "arrival time of > network packet interrupt may not be random enough" Yup. You got it. Many people think that keystroke timing is really a lot more random than it is, too, even though the output is clocked... Perry