Messages in this thread | | | From | Linus Torvalds <> | Date | Sat, 30 Jul 2011 14:29:38 -1000 | Subject | Re: [PATCH 1/2] random: Add support for architectural random hooks |
| |
On Sat, Jul 30, 2011 at 1:46 PM, George Spelvin <linux@horizon.com> wrote: > > I agree with your second paragraph, but disagree violently with your > first: Intel provide no way to test their RNG, and the AES-based whitener > makes it completely private and UNtestable.
Umm.
Guys, if your argument is that you cannot possibly distinguish the Intel implementation from "true" randomness, then WHAT THE HELL are you complaining about?
We don't even care. "True randomness" and "something we cannot possibly even test and distinguish from true randomess" are 100% equivalent. Stop with the idiotic "we cannot test it" crap. If it really is indistinguishable from true randomness, nobody will ever care.
It's that simple. Really.
And if somebody ever figures out that Intel flubbed, and you actually *can* tell it from true randomness, even then, what's the downside? It will be practically random anyway, and we'll be mixing it up some more.
Seriously. This whole discussion just makes me convinced that security people are so far removed from reality that it's not even relevant any more.
Linus
| |