Collecting entropy from device_attach() times.

[Pawel Jakub Dawidek]

On Tue, Sep 25, 2012 at 11:28:13AM +0200, Dag-Erling Smørgrav wrote:
> Ben Laurie <benl at freebsd.org> writes:
> > Not that I dislike Pawel's approach, it seems promising, I'm just
> > pointing out the weakness of the analysis.
> 
> It is also based on fake data.
> 
> If you give me a couple of days, I'll try to come up with a patch that
> collects and stores attach times during boot so we can gather and
> analyse real data.

Note that this fake data is the hardest to gather entropy from, as it
doesn't interact with any external hardware. I'm all for testing it on
real hardware and I expect to be able to gather even more entropy from
it (so discarding less than top 7 bits). The problem with making
observations during boot takes much, much longer, so it will limit the
number os samples significantly, and as you know the more samples the
better.

-- 
Pawel Jakub Dawidek                       http://www.wheelsystems.com
FreeBSD committer                         http://www.FreeBSD.org
Am I Evil? Yes, I Am!                     http://tupytaj.pl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20120925/6a1e5176/attachment.pgp