Re: insufficient entropy for rnd
[email protected] (Matthias Scheler)
| Newsgroups | gmane.os.netbsd.devel.crypto |
|---|---|
| Organization | Z'Ha'Dum - home of the shadows |
| Message-ID | <[email protected]> |
In article <[email protected]>, > Maybe Cyrus SASL (mine is 2.1.12 from pkgsrc) could be compiled > to use /dev/urandom instead, but for me this sounds more like > a workaround than a solution at least for a crypto purpose. If good random generation is important for your server try to get a motherboard with an Intel 8xx chipset (for Pentium III or IV) which has Intel's firmware hub (ASUS motherboards don't have one, Intel motherboards of course do). It'll provide you with a hardware RNG which is supported by NetBSD: pchb0: Intel 82865 Host (rev. 0x02) pchb0: random number generator enabled tron@lyssa:~tron#rndctl -l Source Bits Type Flags sd3 0 disk estimate, collect sd2 0 disk estimate, collect sd1 0 disk estimate, collect sd0 0 disk estimate, collect fd0 0 disk estimate, collect cd1 0 disk estimate, collect cd0 0 disk estimate, collect wd1 101371 disk estimate, collect wd0 45886 disk estimate, collect wm0 0 net pchb0 28911104 rng collect pms0 384123 tty estimate, collect pckbd0 72510 tty estimate, collect Kind regads -- Matthias Scheler http://scheler.de/~matthias/