> Now there's currently an orthogonal problem that /dev/urandom can
> deplete /dev/random's entropy pool entirely and things like generating
> sequence numbers get in the way. I intend to fix that separately.
Curious, how do you intend on doing this?
The reason /dev/urandom depletes /dev/random (it actually just lowers
the entropy estimate) is due to the assumption that knowledge of the
state is now known, so the estimate of how random (actually, we mean
non-deterministic here) needs to decrease...
Are you thinking of (semi) decoupling the two pools?
I sort of agree with you that we should make random "stricter" and push
some of the sillier uses onto urandom... but only to a degree or else
/dev/random grows worthless. Right now, on my workstation with plenty
of user input and my netdev-random patches, I have plenty of entropy and
can safely use random for everything... and I like that.
Robert Love
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/