OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: New entropy source proposal.

From: Mark Murray (markmFreeBSD.ORG)
Date: Mon Mar 07 2005 - 14:00:25 CST


Garrett Wollman writes:
> The usual noise source is thermal noise in the machine itself. The
> process that I've heard described involves:
>
> 0) Disconnecting any input sources.
> 1) Turning the input gain all the way up.
> 2) Taking only the least-significant bit of each sample.

The random_harvest(9) call would do this by reading (say) 16 bits out
of the DSP, and handing it over as harvested entropy while claiming it
had 1 bit of useful randomness. Any other gratuitous randomness in the
sample would provide "free" perturbation of the entropy pool.

> In order to use this in FreeBSD, we would probably want a compile
> option in the sound drivers to disable their use for other purposes
> (e.g., generating sound).

I can think of a way to do this with sysctls.

M
--
Mark Murray
iumop ap!sdn w,I idlaH

_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"