lkml.org 
[lkml]   [2003]   [Aug]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC][PATCH] Make cryptoapi non-optional?
    David Lang wrote:
    > if you care about global uniqueness then you add in config values that the
    > sysasmin sets to make it unique (could be MAC address, IP address, machine
    > name, GPS coordinates, etc)

    Even a good sysadmin cannot guarantee the MAC address is unique, IP
    addresses are often duplicates (e.g. 192.168.1.x) unless you know they
    aren't), and the machine name is likely to conflict with someone
    else's in the world, but these are all good inputs to include.

    > the only reason to add in a random value is if you are trying to protect
    > yourself from a malicious sysadmin and there are security problems that
    > will arise for other machines if a sysadmin can duplicate this ID.

    Not just malicious sysadmins, but accidental conflicts due to
    e.g. trusting your MAC address to be unique in the world, too.

    -- Jamie
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:47    [W:3.449 / U:0.004 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site