random(4) plugin infrastructure for mulitple RNG in a modular fashion

[Mark R V Murray]

On 19 Aug 2013, at 08:18, Warner Losh <imp at bsdimp.com> wrote:
> If we're going to allow passthrough, we should require the kernel config to explicitly do something to get pass through.
> 
> nodevice yarrow
> device random_passthrough
> 
> would be my suggestion.

I don't think it will sell; folks are asking for GENERIC with a run-time switch to flip between the raw HW generator output and a SW mixer/conditioner.

> I'd go so far as to say that if you have random in your kernel, then you need to specify some "filter" or you get a compile-time error. Specifying yarrow via DEFAULTS or std.foo is fine by me, since both of those can be overriden fairly easily....  I'd also think we'd want to FAIL_PANIC or FAIL_BLOCKING, and have that choice hard wired at some level too, to be explicit about things. But maybe that's gilding things a bit too much and a tunable would suffice…

Won't sell. Folks are saying they want the choice of the raw output. In GENERIC.

"What Will Sell" may be up for debate and mind-changing; I think that is the route to explore.

M
-- 
Mark R V Murray

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 353 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freebsd.org/pipermail/freebsd-arch/attachments/20130819/4a0df946/attachment.sig>