On Fri, 14 Sep 2012 22:49:14 +0100 Mark Murray wrote: > If not, then whatever you run instead must also be sound. XOR isn't. > > You have a way to go before you convince me on this one. I'll buy this > argument if it is a routine/regular/risky ocurrence that the output > of (say) > > $ ( ps -gauxwww ; netstat -arn ; sysctl -ao ) | gzip | ... > > ... can be demonstrated to have insignificant entropy when harvested > using my proposed method. BTW - you may want to actually see the > method.
The fastest compression setting on gzip is five times slower than sha256 and doesn't actually solve any specific problem. So far no one has come up with a single cogent argument for compression. If you replace compression with hashing then the need modifying the kernel code is eliminated. _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"
