Re: Collecting entropy from device_attach() times.

看板FB_security作者時間13年前 (2012/09/26 02:01), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串56/80 (看更多)
--dkEUBIird37B8yKS Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 25, 2012 at 12:58:37PM +0200, Dag-Erling Sm=F8rgrav wrote: > Pawel Jakub Dawidek <pjd@FreeBSD.org> writes: > > Note that this fake data is the hardest to gather entropy from, as it > > doesn't interact with any external hardware. I'm all for testing it on > > real hardware and I expect to be able to gather even more entropy from > > it (so discarding less than top 7 bits). The problem with making > > observations during boot takes much, much longer, so it will limit the > > number os samples significantly, and as you know the more samples the > > better. >=20 > I have a handful of SFF machines which support PXE. I can easily set up > an NFS root where /etc/rc just remounts / rw, dumps the data and > reboots. With a sub-minute cycle time, I can get a couple of hundred > thousand samples per machine over the weekend. That would be great. > (I don't even need PXE - they'll probably boot faster from USB sticks or > disks) And probably more reliable. My netbooted test machines occasionally don't boot and you don't want to find out in the morning that the whole process stopped at 1AM:) --=20 Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://tupytaj.pl --dkEUBIird37B8yKS Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iEYEARECAAYFAlBh3c4ACgkQForvXbEpPzTVKwCdFCECxe+wfQ4ivsJYT3miQWMy 7s4An3OzP2iWNAgD8Nc29k9qjyHqsaaS =/OCR -----END PGP SIGNATURE----- --dkEUBIird37B8yKS--
文章代碼(AID): #1GOV5V8M (FB_security)
討論串 (同標題文章)
文章代碼(AID): #1GOV5V8M (FB_security)