Re: Fortuna

2005-04-16 Thread Jean-Luc Cooke
On Sat, Apr 16, 2005 at 10:05:55AM -, [EMAIL PROTECTED] wrote: > Anyway, back to the long-suffering [EMAIL PROTECTED]: ;) > >> something? Because it makes zero difference, and reduces the code > >> size and execution time. Which is obviously a Good Thing.) > > > It just bugged me when I wa

Re: Fortuna

2005-04-16 Thread Jean-Luc Cooke
On Sat, Apr 16, 2005 at 11:10:33AM -, [EMAIL PROTECTED] wrote: > Thank you for pointing out the paper; Appendix A is particularly > interesting. And the [BST03] reference looks *really* nice! I haven't > finished it yet, but based on what I've read so far, I'd like to > *strongly* recommnd th

Re: Fortuna

2005-04-15 Thread Jean-Luc Cooke
On Fri, Apr 15, 2005 at 04:50:36PM -, [EMAIL PROTECTED] wrote: > (And as for the endianness of the SHA-1, are you trying to imply > something? Because it makes zero difference, and reduces the code > size and execution time. Which is obviously a Good Thing.) It just bugged me when I was read

Re: Fortuna

2005-04-15 Thread Jean-Luc Cooke
On Fri, Apr 15, 2005 at 10:42:16AM -0400, Theodore Ts'o wrote: > > Just to be clear, I don't remember it ever throwing entropy away, but > > it hoards some for years, thereby making it effectively unavailable. > > Any catastrophic reseeding solution has to hold back entropy for some > > time. > >

Re: Fortuna

2005-04-14 Thread Jean-Luc Cooke
Thanks for the post. Waiting for 256bits of entropy before outputting data is a good goal. Problem becomes how do you measure entropy in a reliable way? This had me lynched last time I asked it so I'll stop right there. Info-theoretic randomness is a strong desire of some/many users, and they t

Re: Fortuna

2005-04-13 Thread Jean-Luc Cooke
On Wed, Apr 13, 2005 at 05:09:39PM -0700, Matt Mackall wrote: > On Wed, Apr 13, 2005 at 07:43:37PM -0400, Jean-Luc Cooke wrote: > > Ahh. Thanks Herbert. > > > > Matt, > > > > Any insight on how to test syn cookies and the other network stuff in > > random

Re: [PATCH] API for TRNG (2.6.11) [Fortuna]

2005-03-31 Thread Jean-Luc Cooke
On Thu, Mar 31, 2005 at 01:52:14PM +1000, David McCullough wrote: > > Jivin Jeff Garzik lays it down ... > ... > > >If kernelspace can assist and driver _knows_ in advance that data > > >produced is cryptographically strong, why not allow it directly > > >access pools? > > > > A kernel driver can

Re: [PATCH] API for true Random Number Generators to add entropy (2.6.11)

2005-03-29 Thread Jean-Luc Cooke
On Tue, Mar 29, 2005 at 09:39:21PM +1000, Herbert Xu wrote: > Well when you get 55mb/s from /dev/random please get back to me. I will add you to my list for notification of Fortuna Patch to /dev/random (/dev/urandom) JLC - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in

Re: [PATCH] API for true Random Number Generators to add entropy (2.6.11)

2005-03-28 Thread Jean-Luc Cooke
On Fri, Mar 25, 2005 at 06:43:49PM -0500, Jeff Garzik wrote: > > Consider what an RNG does: spews garbage. > > In practical applications, you -do not- want to dedicate the machine to > spewing garbage. The vast majority of users would prefer to use their > machines for real stuff. Thus, "extr

Re: [PATCH] API for true Random Number Generators to add entropy (2.6.11)

2005-03-24 Thread Jean-Luc Cooke
On Thu, Mar 24, 2005 at 07:48:18AM -0500, Jeff Garzik wrote: > If you want to add entropy to the kernel entropy pool from hardware RNG, > you should use the userland daemon, which detects non-random (broken) > hardware and provides throttling, so that RNG data collection does not > consume 100%