看板FB_security
标 题Re: svn commit: r239569 - head/etc/rc.d
发信站NCTU CS FreeBSD Server (Sat Sep 15 17:13:49 2012)
转信站ptt!csnews.cs.nctu!news.cs.nctu!.cs.nctucs.nctu!.org!ownorg!owner-free
RW writes:
> So far no one has come up with a single cogent argument for
> compression. If you replace compression with hashing then the need
> modifying the kernel code is eliminated.
Compression reduces file size without losing entropy; in fact it serves
as an entropy concentrator. That said, I agree that its output is still
not small enough and its speed is unacceptable.
As for modifying kernel code,
$ cat /dev/zero > /dev/random
.... can swamp entropy harvesting. Its an obvious attack and easily
spotted/thwarted, but I'd like to defend against it; the current code is
a bit too naive.
M
--
Mark R V Murray
Cert APS(Open) Dip Phys(Open) BSc Open(Open) BSc(Hons)(Open)
Pi: 132511160
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"