On Sun, 2007-12-09 at 06:21 +0100, Willy Tarreau wrote: > Wouldn't it be possible to mix the data with the pid+uid of the reading > process so that even if another one tries to collect data from urandom, > he cannot predict what another process will get ? BTW, I think that the > tuple (pid,uid,timestamp of open) is unpredictable and uncontrollable > enough to provide one or even a few bits of entropy by itself.
Timestamp perhaps, but pid/uid are trivially guessable in automated environments, such as LiveCDs. And if you're also running on an embedded system without a RTC (common, folks like to save a few cents) then it's all pretty much "trivially" guessable on some level. Jon. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
