Re: Collecting entropy from device_attach() times.

Pawel Jakub Dawidek <[e-mail]> writes:
> Note that this fake data is the hardest to gather entropy from, as it
> doesn't interact with any external hardware. I'm all for testing it on
> real hardware and I expect to be able to gather even more entropy from
> it (so discarding less than top 7 bits). The problem with making
> observations during boot takes much, much longer, so it will limit the
> number os samples significantly, and as you know the more samples the
> better.

I have a handful of SFF machines which support PXE.  I can easily set up
an NFS root where /etc/rc just remounts / rw, dumps the data and
reboots.  With a sub-minute cycle time, I can get a couple of hundred
thousand samples per machine over the weekend.

(I don't even need PXE - they'll probably boot faster from USB sticks or
disks)

DES
--=20
Dag-Erling Sm=C3=B8rgrav - [e-mail]
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"