[arch-general] [arch-dev-public] adding rng-tools to extra?

Kevin Chadwick ma1l1ists at yahoo.co.uk
Mon Jun 4 11:17:36 EDT 2012


On Tue, 5 Jun 2012 00:01:08 +1000
Gaetan Bisson wrote:

> Quite the contrary: if you have one weak source, it'll make the kernel
> believe it has more entropy that it actually has, while other sources,
> seeing as you've filled your entropy pool, won't contribute to it,
> leaving you with the fake entropy.
> 
> Better a single good source than one bad and many good ones. Or guess
> what kind of problem you'll run into...

I suggest you look into OpenBSDs methods that use many sources. No one
mentioned weak sources. Note: they weren't too impressed with haveged.

http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/rnd.c?rev=1.140;content-type=text%2Fplain


More information about the arch-general mailing list