Re: [PATCH] (0/4) Entropy accounting fixes

Alan Cox (alan@lxorguk.ukuu.org.uk)
18 Aug 2002 11:30:05 +0100


On Sun, 2002-08-18 at 04:25, Linus Torvalds wrote:
> Hmm.. After more reading, it looks like (if I understood correctly), that
> since network activity isn't considered trusted -at-all-, your average
> router / firewall / xxx box will not _ever_ get any output from
> /dev/random what-so-ever. Quite regardless of the context switch issue,
> since that only triggers for trusted sources. So it was even more
> draconian than I expected.

The current policy has always been not to trust events that are
precisely externally controllable. Oliver hasn't changed the network
policy there at all.

Its probably true there are low bits of randomness available from such
sources providing we know the machine has a tsc, unless the I/O APIC is
clocked at a divider of the processor clock in which case our current
behaviour is probably much saner.

With modern systems that have real RNG's its a non issue.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/