5 ms·

> http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6e9fa2c8a630e6d0882828012431038abce285b9 http://git.kernel.org/cgit/linux/kernel/git

by wtbob 13y ago

> http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6e9fa2c8a630e6d0882828012431038abce285b9 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.g... I really, really, really wish that the Linux CSPRNG would quit having its flaws papered over. A fellow submitted a patch to implement the Fortuna CSPRNG years ago, and it wasn't accepted because of a misguided belied in entropy estimation. I'm not saying that Fortuna is the One True CSPRNG—it's not—but any clean design would be preferable to the current Rube Goldberg mechanism. I'm pretty sure that /dev/random as it currently stands is secure enough, but 'pretty sure' isn't very reassuring.

forgottenpass 13y ago
Have you brought any of this up on lkml?
- wtbob 13y ago
  Jean-Luc Cooke tried to submit a patch back in September 2004 (yes, a decaded ago) and was shot down. I don't know if anyone has tried since.
zokier 13y ago
The current "Rude-Goldberg mechanism" has one significant advantage over anything that could replace it: it has been reviewed by experts.
- stouset 13y ago
  The implementation may have. But the cryptography certainly hasn't (otherwise, it wouldn't be changing so often).