Re: insufficient entropy for rnd
Daniel Carosone <[email protected]>
| Newsgroups | gmane.os.netbsd.devel.crypto |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Aug 22, 2003 at 06:38:10AM +0100, David Laight wrote: > > In particular, that any amount of noise, from any source, fed into > > the pool will help, while no amount of predictable input will harm. > > Except that the count of the amount of entropy in the pool will be > too high. That's a possibility, but I'm not convinced of even that as a real danger: sources which might easily be fed known data, such as writes to /dev/random, are not flagged "estimate", so won't add to the "count" if a user enables "collect" on, say, -t net, they can still leave estimation off. even those have sample times added as well as the known data, which on a platform with cycle counters has a very strong chance of unknown LS bits. -- Dan.