Test on IBAA

Matthew Dillon dillon at apollo.backplane.com
Wed Jan 30 10:51:48 PST 2008


:Hi Matt,
:...
:
:What I would recommend is that after initialisation
:(after the generator has been seeded from the
:"entropy" file - the seeding method that you added),
:the generator is warmed up as described in:
:
:http://www.burtleburtle.net/bob/rand/isaac.html
:
:I would recommend that the generator is warmed up by
:making 10 (ten) calls to IBAA_Call () (as described in
:the above URL). This has the effect of discarding the
:output of the generator for the first ten
:rounds/calls, and thereby eliminating the
:internal-state leakage produced by the first
:round/rounds.
:
:Sincerely,
:R Carey.

    Ok, so looking at our kernel implementation:

	/usr/src/sys/kern/kern_nrandom.c

    You are suggesting that I make 10 calls to IBAA_Call() at the end
    of the rand_initialize() function?

    Should I also make 10 calls to IBAA_Call() at the end of the
    add_buffer_randomness() function?  That function is called when
    userland (root) writes to /dev/random during early boot.

					-Matt
					Matthew Dillon 
					<dillon at backplane.com>





More information about the Bugs mailing list