[devel] [RE: Generating a lot of randomness...]

[Konstantin A. Lepikhov]

Hi!

JFYI

----- Forwarded message from Ted Mittelstaedt <tedm@> -----

Date: Thu, 23 Jun 2005 22:48:51 -0700
From: Ted Mittelstaedt <tedm@>
To: openssl-users@
Cc: Ken Goldman <kgold@>
Subject: RE: Generating a lot of randomness...


I thought that Linux's random device now supports the HRNG's
for Intel, AMD and Via.  Here's the docs on the Intel HRNG:

http://www.linuxhq.com/kernel/v2.4/3/Documentation/i810_rng.txt

What does menuconfig say?  

The Linux driver used to be built on the old
Theodore Ts'o code, which is not sufficiently random for 
very high crypto.  Maybe your Linux distribution still
uses this code?

An overview of the VIA Technologies HRNG is here:

http://www.via.com.tw/en/initiatives/padlock/hardware.jsp

FreeBSD 5.x has a driver for this in it's /dev/random device.

An overview of the HRNG in the Intel CPU's (P3 and later) is here:

http://www.cryptography.com/resources/whitepapers/IntelRNG.pdf

Another very good technique is to use a simple PC cam with
the lenscap on.  Here's the link:

http://www.lavarnd.org/what/index.html

Have fun!

Ted

>-----Original Message-----
>From: owner-openssl-users@
>[mailto:owner-openssl-users@]On Behalf Of C Wegrzyn
>Sent: Thursday, June 23, 2005 4:14 PM
>To: openssl-users@
>Cc: Ken Goldman
>Subject: Re: Generating a lot of randomness...
>
>
>Linux (gentoo variant).
>
>C.
>
>Ted Mittelstaedt wrote:
>
>>  
>>
>>>-----Original Message-----
>>>From: owner-openssl-users@
>>>[mailto:owner-openssl-users@]On Behalf Of C Wegrzyn
>>>Sent: Thursday, June 23, 2005 10:14 AM
>>>To: Ken Goldman
>>>Cc: openssl-users@
>>>Subject: Re: Generating a lot of randomness...
>>>
>>>
>>>I can't add anything beyond what is available on a AMD or Intel
>>>motherboard. So is there a built-in HRNG that I can get to 
>(if so, where
>>>is the driver for it)?
>>>
>>>    
>>>
>>
>>What operating system are you using?
>>
>>Ted
>>
>>______________________________________________________________________
>>OpenSSL Project                                 http://www.openssl.org
>>User Support Mailing List                    openssl-users@
>>Automated List Manager                           majordomo@
>>
>>
>>  
>>
>
>______________________________________________________________________
>OpenSSL Project                                 http://www.openssl.org
>User Support Mailing List                    openssl-users@
>Automated List Manager                           majordomo@
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@
Automated List Manager                           majordomo@

----- End forwarded message -----

-- 
WBR, Konstantin	      chat with ==>ICQ: 109916175
     Lepikhov,	      speak  to ==>JID: lakostis на jabber.org
aka L.A. Kostis       write  to ==>mailto:lakostis на pisem.net.nospam

...The information is like the bank... 			  (c) EC8OR