Messages in this thread | | | Date | Sat, 17 May 2008 09:01:36 +0800 | From | Herbert Xu <> | Subject | Re: [PATCH] Re: [PATCH] drivers/net: remove network drivers' last few uses of IRQF_SAMPLE_RANDOM |
| |
On Fri, May 16, 2008 at 06:25:12PM +0200, Andi Kleen wrote: > > You could do that, but what advantage would it have? I don't think it's > worth running the FIPS test, or rather requiring the user land daemon > and leaving behind most of the userbase just for this.
The obvious advantage is that you don't unblock /dev/random readers until there is real entropy available.
Remember that a hardware RNG failure is a catastrophic event, so a heavy-handed response such as blocking /dev/random is reasonable.
Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
| |