Oliver Neukum <oneukum@xxxxxxxx> writes: > To guard the entropy pool against malicious spoof we assume > the quality of an unverified source's entropy to be 0. This removes most of the utility of the device, which is to provide entropy to a system early in the boot process. If you have physical security, then a USB device is just as reliable as any other piece of hardware. If you don't have physical security, then the entire system is suspect. -- -keith
Attachment:
signature.asc
Description: PGP signature