getentropy() support
Kurt Roeckx <[email protected]> Mon, 4 Jun 2018 22:56:41 +0200
| Newsgroups | gmane.os.netbsd.devel.crypto |
|---|---|
| Message-ID | <[email protected]> |
Hi, Would it be possible to add getentropy() to NetBSD? Most major UNIX OSs have added support for it, NetBSD is currently the only one I know that doesn't have it. It was introduced by OpenBSD, and is available in at least FreeBSD, Solaris, Linux and OSX. The reason for getentropy() is that it's a direct system call, there is no need to open a file which might not be available in a chroot for instance. getentropy() provides the following features: - It's a high quality CSRNG, intended to be used by a CSRNG in userspace. - It blocks when the kernel CSRNG hasn't been initialized yet. Kurt