To: linux-kernel@vger.kernel.org
From: Ben Pfaff <blp@cs.stanford.edu>
Subject: Re: Entropy Pool Contents
Date: Mon, 27 Nov 2006 21:19:20 -0800
Message-ID: <878xhw5esn.fsf@blp.benpfaff.org>
References: <ek2nva$vgk$1@sea.gmane.org> <456B4CD2.7090208@cfl.rr.com>
	<ekfifg$n41$1@taverner.cs.berkeley.edu>
	<EB3E5F09-6529-4AB9-B7EF-DFCACC6D445E@mac.com>
	<ekgd7u$6gp$1@taverner.cs.berkeley.edu>
Reply-To: blp@cs.stanford.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/21.4 (gnu/linux)
Cancel-Lock: sha1:ELZZN2Ru0oqApHM2hffXOpx5AoE=
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 985
Lines: 18

daw@cs.berkeley.edu (David Wagner) writes:

> Well, if you want to talk about really high-value keys like the scenarios
> you mention, you probably shouldn't be using /dev/random, either; you
> should be using a hardware security module with a built-in FIPS certified
> hardware random number source.  

Is there such a thing?  "Annex C: Approved Random Number
Generators for FIPS PUB 140-2, Security Requirements for
Cryptographic Modules", or at least the version of it I was able
to find with Google in a few seconds, simply states:

        There are no FIPS Approved nondeterministic random number
        generators.
-- 
"Welcome to the Slippery Slope. Here is your handbasket.
 Say, can you work 70 hours this week?"
--Ron Mansolino

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/