Subject: Re: replace kernel random number function
To: Steven M. Bellovin <smb@research.att.com>
From: None <itojun@iijlab.net>
List: tech-security
Date: 10/23/2000 09:25:46
by mail.netbsd.org with SMTP; 23 Oct 2000 00:25:51 -0000
by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id JAA07477;
Mon, 23 Oct 2000 09:25:47 +0900 (JST)
To: "Steven M. Bellovin" <smb@research.att.com>
cc: tech-security@netbsd.org, tech-kern@netbsd.org
In-reply-to: smb's message of Sun, 22 Oct 2000 11:56:44 -0400.
<20001022155644.5A0A435DC3@smb.research.att.com>
Subject: Re: replace kernel random number function
From: itojun@iijlab.net
Date: Mon, 23 Oct 2000 09:25:46 +0900
Message-ID: <7475.972260746@coconut.itojun.org>
>Where will you get the seeds? That's the really hard part.
i thought of reseeding by rnd(4) random number device, like
every N seconds.
>The right thing to do would be to port yarrow (see www.counterpane.com,
>though I don't have the link available just now and I'm offline when
>writing this). Unfortunately, it's filled with lots of DLL-ish things.
hmm, i'm sure we can strip DLL-ish part off.
itojun