[lkml]   [2001]   [Aug]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] let Net Devices feed Entropy, updated (1/2)

    > Johan Adolfsson wrote:
    > > Where would you get the single seed from in an embedded head
    > > less system if you don't have a hardware random generator,
    > > no disk and don't seed it from the network interrupts?

    Martin Dalecki wrote:
    > The device get's powerd up at a random time for the attacker.

    Perhaps true, but for some systems, the time it takes for a certain
    application that need some random data to start is the same at
    each powerup (more or less) so the application might use the
    same session key the first time after each powerup.
    (Not that gathering info from network interrupt necessarily
    would improve this case, but it might)

    > That's entierly sufficient if you assume that your checksum function
    > f(i) hat the property that there is no function g, where we have
    > f(i+1)=g(f(i)), where g has a polynomial order over the time domain.
    > i is unknown for the attacker.

    Can't say I know the details of the functions used in the /dev/[u]random
    functions to say if that assumption is true. But I feel that stiring the
    pool using interrupt timing and thus adding the number of unknowns
    can't be a bad thing.
    Simply relying on the uptime would make it really easy to
    predict the f() function wouldn't it?


    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 12:57    [W:0.023 / U:12.580 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site