看板FB_security
标 题Re: Collecting entropy from device_attach() times.
发信站NCTU CS FreeBSD Server (Wed Sep 26 02:37:35 2012)
转信站ptt!csnews.cs.nctu!news.cs.nctu!FreeBSD.cs.nctu!freebsd.org!owner-free
--dkEUBIird37B8yKS
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Sep 25, 2012 at 12:58:37PM +0200, Dag-Erling Sm=F8rgrav wrote:
> Pawel Jakub Dawidek <[email protected]> writes:
> > Note that this fake data is the hardest to gather entropy from, as it
> > doesn't interact with any external hardware. I'm all for testing it on
> > real hardware and I expect to be able to gather even more entropy from
> > it (so discarding less than top 7 bits). The problem with making
> > observations during boot takes much, much longer, so it will limit the
> > number os samples significantly, and as you know the more samples the
> > better.
>=20
> I have a handful of SFF machines which support PXE. I can easily set up
> an NFS root where /etc/rc just remounts / rw, dumps the data and
> reboots. With a sub-minute cycle time, I can get a couple of hundred
> thousand samples per machine over the weekend.
That would be great.
> (I don't even need PXE - they'll probably boot faster from USB sticks or
> disks)
And probably more reliable. My netbooted test machines occasionally
don't boot and you don't want to find out in the morning that the whole
process stopped at 1AM:)
--=20
Pawel Jakub Dawidek
http://www.wheelsystems.com
FreeBSD committer
http://www.FreeBSD.org
Am I Evil? Yes, I Am!
http://tupytaj.pl
--dkEUBIird37B8yKS
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
iEYEARECAAYFAlBh3c4ACgkQForvXbEpPzTVKwCdFCECxe+wfQ4ivsJYT3miQWMy
7s4An3OzP2iWNAgD8Nc29k9qjyHqsaaS
=/OCR
-----END PGP SIGNATURE-----
--dkEUBIird37B8yKS--