Messages in this thread | | | Date | Tue, 24 Aug 2004 16:22:08 -0500 | From | Matt Mackall <> | Subject | Re: [PATCH] [3/4] /dev/random: Use separate entropy store for /dev/urandom |
| |
On Fri, Aug 20, 2004 at 12:57:20AM -0400, Theodore Ts'o wrote: > > This patch adds a separate pool for use with /dev/urandom. This > prevents a /dev/urandom read from being able to completely drain the > entropy in the /dev/random pool, and also makes it much more difficult > for an attacker to carry out a state extension attack.
My version of this went a step further. We want to at all times ensure that there's enough data to do a full catastrophic reseed in the blocking pool, so we have to assure we're never drawing below that point when doing reads for urandom.
-- Mathematics is the supreme nostalgia of our time. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |