Re: insufficient entropy for rnd

Daniel Carosone <[email protected]>
Newsgroups gmane.os.netbsd.devel.crypto
Message-ID <[email protected]>
On Fri, Aug 22, 2003 at 06:38:10AM +0100, David Laight wrote:
> > In particular, that any amount of noise, from any source, fed into
> > the pool will help, while no amount of predictable input will harm.
> 
> Except that the count of the amount of entropy in the pool will be
> too high.

That's a possibility, but I'm not convinced of even that as a real
danger:
 
  sources which might easily be fed known data, such as writes to
  /dev/random, are not flagged "estimate", so won't add to the "count"

  if a user enables "collect" on, say, -t net, they can still leave
  estimation off.

  even those have sample times added as well as the known data,
  which on a platform with cycle counters has a very strong chance
  of unknown LS bits.

--
Dan.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.