[OmniOS-discuss] OmniOS/Illumos and entropy

Joshua M. Clulow josh at sysmgr.org
Wed Nov 2 18:17:56 UTC 2016


On 2 November 2016 at 10:53, Dan McDonald <danmcd at omniti.com> wrote:
> One could add another RNG provider using CPU features, but given recent revelations about the some of Intel ones, I'm not so sure how good of an idea that might be.

In general, as long as we're combining _multiple_ potentially
untrustworthy but independent sources, and using them only to
occasionally _reseed_ a high quality PRNG rather than directly using
the "random" output, we should be safe.

-- 
Joshua M. Clulow
UNIX Admin/Developer
http://blog.sysmgr.org


More information about the OmniOS-discuss mailing list