On Fri, Sep 09, 2011 at 09:04:17AM -0400, Steve Grubb wrote: But what > I was trying to say is that we can't depend on these supplemental > hardware devices like TPM because we don't have access to the > proprietary technical details that would be necessary to supplement > the analysis. And when it comes to TPM chips, I bet each chip has > different details and entropy sources and entropy estimations and > rates. Those details we can't get at, so we can't solve the problem > by including that hardware. That is the point I was trying to > make. :) Let's be clear that _we_ which Steve is referring to is Red Hat's attempt to get a BSI certification so they can make $$$. It has nothing to do with security, except indirectly, and in my opinion, breaking application by causing network daemons to suddenly lock up randomly just so that Red Hat can make more $$$ is not a good reason to push a incompatible behavioural change into /dev/random. - Ted -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
