On Fri, Feb 01, 2013 at 08:19:30PM -0500, Paul Wouters wrote:
On Fri, 1 Feb 2013, Matthew Garrett wrote:
>other than providing other sources of entropy, and long-term this is
>going to be fixed once everyone's moved to Ivy Bridge and has an
>unprivileged instruction to hand out entropy.
uhm I know intel really wants us to use it directly and trust them, but
we're going to run it through the kernel right? And just expose it via
/dev/random to userland yes?
rngd calls rdrand and seeds /dev/random with it. The kernel doesn't use
rdrand directly, but does have some setup code to ensure that it's
reseeded before userspace starts.
--
Matthew Garrett | mjg59(a)srcf.ucam.org