lkml.org 
[lkml]   [2001]   [Aug]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRE: /dev/random in 2.4.6
    Date

    > Why is it required to use only the time between irq's of a single device
    > for start/stop times (time delta measurement)? If the time period were
    > instead calculated not on the time between irq of a single device, but
    > instead start and stop times were based on different device irq's, then
    > many pseudo entropy sources could become full entropy sources...to
    > accurately/precisely snoop eth0 traffic and determine it's irq would no
    > longer be helpful if the time involved the starting of a timer from
    > eth0, but the stop (and thus delta) was derived from something else like
    > hard drive activity. Force the attacker to monitor more than one irq,
    > plus require the attacker to know which irq device corresponds to the
    > stop irq of a particular timer.
    >
    > A variation on the theme would be to rotate which entropy source is used
    > as the stop event whenever a pseudo entropy source starts a timer. E.G.,
    > eth0 irq starts a timer, and the hard drive is set to stop the timer on

    This makes no difference at all. It comes down to, ultimately, the
    difference between adding 'X' and 'Y' to an entropy pool or 'X' and 'X+Y'.
    The set 'X','Y' has the same amount of entropy as the set 'X','X+Y'. Either
    the time at which events occur contains entropy or it doesn't. No amount of
    math can increase the amount of entropy present in those times. Sorry.

    DS

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 12:57    [W:0.023 / U:31.248 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site