> On Sat, 2003-01-25 at 03:41, Sam Leffler wrote:
> > With OpenSSL you get lots of applications. I'm not sure if Kerberos
also
> > benefits. In the kernel there's nothing else at the moment but that's
not
> > to say that things like gbde couldn't use it. I also intend to use it
to do
> > AES for wireless security protocols.
>
> What about /dev/random? The hifn chips have a random number generator on
> board, although I've no idea how good it is.
Right. If the crypto h/w has a RNG on it then the entropy is automatically
fed to the system PRNG. This can be a big win since it allows you to
disable IRQ entropy harvesting which is too expensive for a production
environment.
Sam
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message
