Subject: Re: insufficient entropy for rnd
To: None <tech-crypto@netbsd.org>
From: Matthias Scheler <tron@zhadum.de>
List: tech-crypto
Date: 08/17/2003 17:19:10
In article <20030811201900.5abe568f.rumi_ml@rtfm.hu>,
> Maybe Cyrus SASL (mine is 2.1.12 from pkgsrc) could be compiled
> to use /dev/urandom instead, but for me this sounds more like
> a workaround than a solution at least for a crypto purpose.

If good random generation is important for your server try to get a
motherboard with an Intel 8xx chipset (for Pentium III or IV) which
has Intel's firmware hub (ASUS motherboards don't have one, Intel
motherboards of course do). It'll provide you with a hardware RNG
which is supported by NetBSD:

pchb0: Intel 82865 Host (rev. 0x02)
pchb0: random number generator enabled

tron@lyssa:~tron#rndctl -l
Source                 Bits Type      Flags
sd3                       0 disk estimate, collect
sd2                       0 disk estimate, collect
sd1                       0 disk estimate, collect
sd0                       0 disk estimate, collect
fd0                       0 disk estimate, collect
cd1                       0 disk estimate, collect
cd0                       0 disk estimate, collect
wd1                  101371 disk estimate, collect
wd0                   45886 disk estimate, collect
wm0                       0 net  
pchb0              28911104 rng  collect
pms0                 384123 tty  estimate, collect
pckbd0                72510 tty  estimate, collect

	Kind regads

-- 
Matthias Scheler                                  http://scheler.de/~matthias/